Symptom
You want to use a user (SYSTEM below) to revoke a role (test_role below) from another user (DEF below).
The user (SYSTEM) is not the owner of the role and has no grant/revoke authorization of the role.
You cannot revoke the role from the user in the User Editor because the Delete button is grey.
However you can execute the SQL command below without any error.
But the role is not really revoked from the user (DEF).
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Read more...
Environment
HANA 1.0 all revisions
Product
Keywords
ROLE ADMIN, delete, grantor, grantee, role owner, REVOKE , KBA , HAN-DB-SEC , SAP HANA Security & User Management , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.