If you plan to work on SAP HANA and master it, then you can’t afford to miss SAP HANA Analytic Privileges. We will learn about this concept in detail here as it plays a crucial role in SAP HANA functioning.<\/p>\n
With the help of this tutorial, you will learn to create both types of analytic privileges i.e. Classical and SQL in easy steps.<\/p>\n
To start with understanding analytic privileges in SAP HANA, let us imagine a scenario. Suppose you work in an MNC. The company is based in the USA but has offices in other countries like India, Japan, Germany, China, etc.<\/p>\n
They have a central repository where sales data for all the countries is stored together. But they don\u2019t want all the report developers sitting across the globe to access entire data regarding sales.<\/p>\n
Then, what do they do? They restrict each report developer\/user to access the sales data of their concerning region\/country only. So, if you are working in India, you will only get to see and work with the sales data of India.<\/p>\n
Thus, analytic privileges have the same job to do in SAP HANA, that is, restrict users to access only that portion of data that is relevant to them and their business roles from the whole. That is why they are named analytic privileges as they permit users to access a decided data set as their privilege.<\/p>\n
Following the similar concept, analytic privileges in SAP HANA are data access restrictions defined and assigned to selected users. They work as data security tools for SAP HANA users and clients.<\/p>\n
Analytic privileges are created over information modeling objects and restrict users to see just a decided part from the information views present in that package or modeling objects. You can create an analytic privilege for calculation view, attribute view or analytic view.<\/p>\n
Analytic privileges provide row-level data security to SAP HANA users as opposed to object-level security assigned by object privileges.<\/p>\n
Object-level security can only allow or restrict a user from opening an object, but row-level security allows or restricts users from accessing specific columns within an object.<\/p>\n
A user to which an analytic privilege is assigned can only see the attributes and data related to it according to the condition defined while creating the privilege.<\/p>\n
For instance, if a user named Aron_UK has an analytical privilege where he can only see employee data for the year 2018, then, he cannot access data from any other year. Also, you can only select attributes to define analytic privilege and no measures can be selected.<\/p>\n
Now, we will learn two types of analytic privileges that you can create in SAP HANA.<\/p>\n
The classical analytic privilege is the simple XML-based privilege which use SAP HANA Studio UI to create and assign basic privileges to users. Some features of classical analytic privileges in SAP HANA are:<\/p>\n
SQL analytic privilege is SQL-based and allows users to create more complex restriction conditions than classic privileges. Users can apply complex filtering and restriction conditions based on information models and procedures.<\/p>\n
These privileges also differ slightly in terms of flexibility and options in creating privileges. Some important features of SQL analytic privilege are:<\/p>\n
Moving further in SAP HANA Analytic Privileges Tutorial, we will learn the steps to create classical analytic privilege and SQL analytic privilege. The procedures for creating analytic privilege is nearly same for both classical and SQL analytic privilege.<\/p>\n
The SQL analytic privilege just differs when you need to write an SQL script to define complex formulations and restriction conditions which cannot otherwise be done using the XML-based user interface method.<\/p>\n
Step 1:<\/strong> Open SAP HANA Studio<\/strong> and login to the system.\u00a0All the folders within a system will be visible once you log in.<\/p>\n Step 2:<\/strong> Go to the Content<\/strong> node and right-click on the package under which you wish to create an analytic privilege. Click on New<\/strong> and Select Analytic Privilege from the options.<\/p>\n Step 3: Create an Analytic Privilege<\/strong><\/p>\n Enter the name of the privilege, add a label\/description. Also, you can change the package from here.<\/p>\n Select the type of privilege, create new or copy the format of existing privilege. Click on Next<\/strong> to continue.<\/p>\n Step 4: Select Information Models<\/strong><\/p>\n From the next dialog, select the information views upon which you wish to assign the analytic privilege.<\/p>\n You can select any calculation,\u00a0analytic or\u00a0attribute view<\/strong> from the available list.\u00a0To add a view into your privilege, select the view and click on Add<\/strong>.<\/p>\n Step 5: <\/strong>Next,\u00a0the main analytic privilege will open to creating an interface. It divides into five sections. Let us discuss them one by one.<\/p>\n The first section is the General<\/strong> section. It shows the Name<\/strong> of the analytic privilege, Label<\/strong>, and Type<\/strong>. You can check the \u201cApplicable to all information models\u201d<\/em> if you wish this privilege to apply on all the views containing the selected attribute.<\/p>\n There are several operator types from which you can select such as equal, greater than, greater equal, less than, less equal,<\/em> etc. For instance, we have set the restriction value as 2001 i.e. the user can only see data for the year 2001.<\/p>\n You can select the appropriate operator under the Operator<\/strong> column and enter a date or period (from<\/em> and to<\/em>) of validity.<\/p>\n After entering all the details, select the year 2001 from the attribute YEAR of the calculation view. Finally, click on the green execute<\/strong> button present on the upper bar.<\/p>\n Step 6:<\/strong> Next, we will assign the created privilege to a user. You do this by selecting a user from the Security<\/strong> node (suppose we have selected user DTF1<\/em>).<\/p>\n This will open the user details pane. At the bottom, select Analytic Privilege tab and add the analytic privilege by clicking on the green plus +<\/strong> icon.<\/p>\n Step 7: Select Analytic Privileges<\/strong><\/p>\n Search for the analytic privilege from the list using the search option. Then, click on OK<\/strong>.<\/p>\n The analytic privilege, you select will be added and applied for that user.<\/p>\n Step 8:<\/strong> You can also confirm the successful creation of the analytic privilege by looking in the Analytic Privileges<\/em> folder under the relevant package (in your HANA system folder).<\/p>\n Step 9:<\/strong> If the user DTF1<\/em> opens the calculation view DTF_UNION<\/em>, only the data for the year 2001 will be visible.\u00a0Thus, it shows that the analytic privilege is successfully applied to the user DTF1.<\/p>\n To create SQL Analytic Privilege, select the privilege type as SQL Analytic Privilege when entering the name of the privilege in initial stages.<\/p>\n On the window of privilege creator, there are three options are available while creating SQL analytic privilege; Attribute, SQL Editor<\/strong> and Dynamic<\/strong>. All the three modes are for the users to create analytic privilege according to the level of complexity of restriction logic.<\/p>\n If you wish to create a simple privilege, then go with attribute option. If you wish to apply a filter condition through a SQL statement to define the privilege, then go for SQL Editor method. You can also apply complex filter conditions having sub-queries.<\/p>\n And if your privilege has a complex formulation logic which involves procedures and state of the user, then select the dynamic option.<\/p>\n We will discuss how to create a privilege from each.<\/p>\n Step 1: Attribute option –<\/strong>\u00a0It is the same as creating the classic analytic privilege. Select an attribute from the view you have selected. Then enter a value for restriction for instance, “United States”<\/em>.<\/p>\n Step 2: SQL Editor option –<\/strong>\u00a0You can simply enter the restriction conditions as a SQL statement. You can make the logic as complex as possible by creating the script as per the requirement.<\/p>\n For instance, in our case, the restriction condition SQL statement would be:<\/p>\n Step 3: Dynamic option –<\/strong>\u00a0Using this option, you can define a complex procedure and base data access on the outcome of more than one events or procedures.<\/p>\n For instance, we have created a procedure where only the user named DTF_USER has access to only the data related to the USA in the calculation view named CA_DEALER_SALES_SQL.<\/p>\n The complex procedure used is:<\/p>\n Now, when the user DTF_USER open the calculation view CA_DEALER_SALES_SQL, all the data related to the United States will be visible.<\/p>\n Please note that no other SAP HANA user can access this particular set of data\u00a0(related to sales only in the USA)\u00a0 because they don\u2019t have that analytic privilege assigned to them. For them to access the data, you need to add that analytic privilege to that particular user.<\/p>\n We hope this explanation on SAP HANA Analytic Privileges was useful for you. We know that this topic seems a little confusing at first because of the many steps and procedures it involves but it is a very important process from the\u00a0data security point of view.<\/p>\n Any queries or feedback for us? Do let us know in the comment section below.<\/p>\n","protected":false},"excerpt":{"rendered":" If you plan to work on SAP HANA and master it, then you can’t afford to miss SAP HANA Analytic Privileges. We will learn about this concept in detail here as it plays a...<\/p>\n","protected":false},"author":6,"featured_media":53417,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18002],"tags":[19399,19401,19402,19400],"class_list":["post-53340","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sap-hana","tag-analytic-privileges-in-sap-hana","tag-create-classical-analytic-privilege","tag-create-sql-analytic-privilege","tag-types-of-analytic-privileges"],"yoast_head":"\n\n
\n
Steps to Create SQL Analytic Privilege<\/h4>\n
((\u201cSALES_COUNTRY\u201d = \u2018United States\u2019))<\/pre>\n
SELECT * from \u201cPUBLIC\u201d. \"STRUCTURED_PRIVILEGES\u201d\r\nwhere ROOT_SCHENA_NAME = '_SYS_DTF'\r\n\r\nAND ROOT_OBJECT NAME = \u2018hana-modeling\/COMP_SALES_SQL\u2019\r\nAND USER_NAME = 'DTF_USER'<\/pre>\n
Summary<\/h3>\n