SAP Knowledge Base Article - Preview

3486643 - Automated GRANT statements being executed by SYSTEM user

Symptom

You notice that GRANT statements are getting executed in both the SYSTEMDB and tenant using the SYSTEM user but are not manually executed (by you) and would like to know the reason for these statements.

Below is an example of the executed statement :

GRANT SELECT, INSERT, UPDATE, DELETE, EXECUTE ON SCHEMA _SYS_ADVISOR TO SYSTEM WITH GRANT OPTION

How it appears in the audit_log :

HOST       PORT  SERVICE_NAMECONNECTION_IDCLIENT_HOST          CLIENT_IP     CLIENT_PIDCLIENT_PORTUSER_NAME  STATEMENT_USER_NAMEAPPLICATION_NAMEAPPLICATION_USER_NAMEXS_APPLICATION_USER_NAMEAUDIT_POLICY_NAME                         EVENT_STATUSEVENT_LEVELEVENT_ACTION   SCHEMA_NAME OBJECT_NAMEPRIVILEGE_NAMEROLE_SCHEMA_NAMEROLE_NAMEGRANTEE_SCHEMA_NAMEGRANTEEGRANTABLEFILE_NAMESECTIONKEY PREV_VALUEVALUE STATEMENT_STRING                                                                                
<hostname><port number>nameserver  <connection id>                                   00SYSTEM     _SYS_ADVISOR       ?               ?                    SYSTEM                  SYSTEM_ACTIONS_ALL                        SUCCESSFUL  CRITICAL   GRANT PRIVILEGE_SYS_ADVISOR?          DELETE        ?               ?        ?                  SYSTEM GRANTABLE?        ?      USER?         ?     GRANT SELECT, INSERT, UPDATE, DELETE, EXECUTE ON SCHEMA _SYS_ADVISOR TO SYSTEM WITH GRANT OPTION

 


Read more...

Environment

SAP HANA, platform edition

Product

SAP HANA, platform edition all versions

Keywords

automated, GRANT, SYSTEM, user, _SYS_ADVISOR, executed, SYSTEMDB, tenant, statement, audit_log, select, insert, update, delete, execute, schema , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.