Symptom
All HANA views are visible when searched in Analysis Office.
Environment
SAP Analysis for Microsoft Office
Resolution
There is no setting/option in Analysis Office to control the HANA views that the users can see. Everything should be configured in HANA side.
To make sure that the users can only view data in SAP HANA data sources (analytic views and calculation views) that they have authorization for, the following activities can be performed:
- Copy the role sap.bc.ina.service.v2.userRole::INA_USER.
- In the copied role, remove the Select privilege on schema _SYS_BIC.
- Replace the original role sap.bc.ina.service.v2.userRole::INA_USER by assigning the copied role to your users.
- Define the detailed privileges for the new copied role as described in SAP Note 1907697
Refer to chapter "Defining connections to SAP HANA".
Access to and modification of database objects including views is controlled on the HANA Database side with Object privileges. See chapter "Object Privileges" in HANA documentation.
For issues regarding authorizations and restrictions of HANA packages or HANA views, create an case by selecting the component HAN-DB-SEC.
Keywords
KBA , BI-RA-AO-XLA , Excel Addin , HAN-DB-SEC , SAP HANA Security & User Management , Problem