on 09-30-2014 9:54 AM
Hi Team,
We have a requirement to keep supers users like SYSTEM secure from unauthorized usage.
In ERP, we have system/communication user types. These users can be used only from batch jobs. So is there a similar way in HANA also ?
This will help us to keep powerful users which connect to Data services or SYSTEM user safe from direct login to HANA studio.
Now different teams like basis/security/SLT replication teams know the passwords which is a risk.
Thanks in advance.
Regards,
Anil
Dear
you can consult with your senior and create one user for batch job with all necessary roles in that
bcaz if you system user for batch purpose and somebody knows the password he can create the mess
Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Dear
System user you can keep him lock and whenever you require unlock that user or create one super user on top management level and keep password at secure place so no new person can enter into your hana box
Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Anil,
SYSTEM User should not be used for HANA Production.
Just create another User with all the authorization same as SYSTEM user and then deactivate SYSTEM user
Just create different roles and users for these different teams
You can create an admin user and admin role for BASIS Team, SLT specific user and role for SLT team and a User/role/Security Administration user and role for Security team
Check the below documents that will be helpful:
SAP HANA Security: An Overview | SAP HANA
How to Define Standard Roles for SAP HANA Systems | SCN
Regards,
Vivek
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
89 | |
10 | |
9 | |
9 | |
9 | |
6 | |
6 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.