2442838 - Missing authorizations on HANA for cloud systems in SAP Enterprise Search scenario

• Cloud customer is executing task list SAP_ESH_CONSISTENCY_CHECK in STC01 transaction and errors occur :
  Consistency check of connector 'ABCALL~CEMPLYMNTSRCHOP~' step 'Core Data Services' returns error
  Error while trying to read connector configuration for from HANA
  HANA user for schema does not have privileges for in Connector properties for CDS view not found
  or
  Consistency check of connector 'ABCALL~ESH_PS_TERMS_USR~' step 'Core Data Services' returns error
  Error while trying to read connector configuration for from HANA
  HANA user for schema does not have privileges for in Connector properties for CDS view not found

•  SAP S/4HANA Cloud Public Edition 1702

1. Execute task list SAP_ESH_CONSISTENCY_CHECK in STC01
2. Execute task list in background and error logs will display :
   Consistency check of connector 'ABCALL~CEMPLYMNTSRCHOP~' step 'Core Data Services' returns error
   Error while trying to read connector configuration for from HANA
   HANA user for schema does not have privileges for in Connector properties for CDS view not found
   or
   Consistency check of connector 'ABCALL~ESH_PS_TERMS_USR~' step 'Core Data Services' returns error
   Error while trying to read connector configuration for from HANA
   HANA user for schema does not have privileges for in Connector properties for CDS view not found

• The HANA user (used for search-calls) has missing authorizations. Our ESH_SEARCH procedure, which is the search engine for CDS-based connectors, needs to access certain metadata-tables in the SYS_RT schema of HANA. Ususally, the DEFAULT-connection/user is taken.
  These authorizations are missing currently in many cloud systems.

• HANA user for schema does not have privileges. As HANA SYSTEM User execute the following SQL statements:
  1- GRANT EXECUTE ON SYS.ESH_CONFIG TO <HANA Primary DB Connection User>;
  2- GRANT EXECUTE ON SYS.ESH_SEARCH TO <HANA Primary DB Connection User>;
  3- GRANT SELECT ON _SYS_RT.ESH_MODEL TO <HANA Primary DB Connection User>;
  4- GRANT SELECT ON _SYS_RT.ESH_MODEL_PROPERTY TO <HANA Primary DB Connection User>;
  
  Please find further internal information about CDS setup for cloud scenarios and the required authorizations on HANA side using the internal wiki link below :
  https://wiki.wdf.sap.corp/wiki/display/HDBSearch/System+Setup+for+ABAP+CDS+Search
  
  
• We usually call via the DEFAULT db-connection from ABAP to HANA.
• You can also reactivate the connector 'ABCALL~CEMPLYMNTSRCHOP using the report  ESH_REFRESH_CDS_CONFIGURATION for example. The other connectors based on CDS views like: CPAOBJCONFCHRCWD, CPAOBJASSGWD,...CPASQNCMGRWD cannot be used for searching with enterprise search because of UNION_ALL and case-statement, which are not supported.

SAP_ESH_CONSISTENCY_CHECK, CDS views, CDS connectors. , KBA , BC-EIM-ESH , NetWeaver Enterprise Search , Problem