How To Implement SQL Analytic Privilege in SAP HANA

Analytic privileges control access to SAP HANA data models. 
Analytic privileges are used to grant different users access to different portions of data in the same view depending on their business role. It allows us to maintain row-level access. 


SQL privileges implement authorization at object level only. Users either have access to an object, such as a table, view or procedure, or they do not. 

While this is often sufficient, there are cases when access to data in an object depends on certain values or combinations of values. Analytic privileges are used in the SAP HANA database to provide such fine-grained control of which data individual users can see within the same view. 


Analytic privileges are intended to control read-only access to SAP HANA information models (attribute views, analytic views, calculation views

The attribute restriction of an analytic privilege specifies the value range that the user is permitted to access using value filters. In addition to static scalar values, stored procedures can be used to define filters. This allows user-specific filter conditions to be determined dynamically in runtime, for example, by querying specified tables or views. As a result, the same analytic privilege can be applied to many users, while the filter values for authorization can be updated and changed independently in the relevant database tables.
Create a calculation View, In Projection_1 select EMPLOYEE_LOCATION Table

Save and Activate the View and see  the below output


Now create SQL Analytic  Privilege and select the our calculation view .
Restrict the Column EMPLOYEE_LOCATION_AREA with INDIA like below.


Go to security tab select the user and apply Analytic Privilege to that user.


Output:

Comments

  1. Data Perusal Consultancy Pvt. Ltd.13 April 2018 at 02:46

    Wow!! great Post.
    Thanks for providing this amazing information. I think we can expect better success with these tips.
    Sap Analytics
    Keep Posting:)

    ReplyDelete
  2. Deepa3 May 2019 at 10:10

    We are on HANA 2.0 and using HANA studio (xs) for creating calculation views. Is there an equivalent of _SYS_BI_CP_ALL with SQL privileges? If not, how can developers execute their views without creating analytical privileges?

    ReplyDelete

Post a Comment

Popular posts from this blog

Successful implementation of Cumulative Sum in SAP HANA

Image
A cumulative sum is a sequence of  partial sums  of a given sequence. For example, the cumulative sums of the sequence  , are  ,  ,  , …. Cumulative sums. Cumulative Sum:Cumulative sums, or running totals, are used to display the total sum of data as it grows with time (or any other series or progression). This lets you view the total contribution so far of a given measure against time. If you’re a frequent user of the SUM function, you may occasionally want to take the cumulative SUM of a value across a table. For example, if you have a table that outlines product sales by month for an entire year, you may want to insert a cumulative SUM column that shows year-to-date sales at the end of each month. This can be easily accomplished using relative and absolute cell references combined with the SUM function. Let’s take a look at how it works. Following are the steps to implement  Cumulative Sum in SAP HAN...
Read more

How To Implement Smart Data Access in SAP HANA

Image
SAP HANA smart data access enables remote data to be accessed as if they are local tables in HANA, without copying the data into SAP HANA (without having to replicate the data to SAP HANA) in SAP HANA, you can create  virtual tables  which point to remote tables in different data sources. See  HANA - Adapter (Virtual Table) With smart data access SAP HANA, you can can retrieve data from tables in external databases (e.g. Sybase, Oracle or SAP HANA). This reduced the need to load all accessed data into SAP HANA.                                      SDA facilitates the HANA to integrate data from various heterogeneous sources like Sybase IQ, Teradata, Hadoop and SAP Sybase Adaptive Service Enterprise. Below are the following steps to implement Smart Data Access: Go to Provisi...
Read more