3725193 - Deployment Errors When Using CTS to Transport hdbrole: "Highest return code is 8"

When using CTS to transport an hdbrole, the "Selection for Import" and "Import" sessions complete successfully without any error messages. However, the "Deployment" phase ends with errors and the transport log shows:

Stop deployment of HDBLM
Highest return code is 8
Deployment
End date and time : xxxxxxxxx
Ended with return code: ===> 8 <===
######################################

The target indexserver trace shows entries like:

[784]{227718}[62/875642600] 2026-03-09 06:09:01.272633 i TraceContext     TraceContext.cpp(01371) : UserName=SYSTEM, ApplicationUserName=SYSTEM, ApplicationName=sap.hana.xs.lm, ApplicationSource=/sap/hana/xs/lm/slp/slp.xsjs/runs/6953/actions/start->/sap.hana.xs.lm.core:SlpDeploy.xsjs::deployAsync, ClientIp=10.180.2.251, StatementHash=ce0d9cedb9b4a0194dd551c7f06c22ad, StatementExecutionID=844433535136242
[784]{227718}[62/875642600] 2026-03-09 06:09:01.272633 e RoleRuntime      RoleRuntime.cpp(00129) : activationID 4993: Granting SQL privilege ALTER on "MIKE" failed {tenant: , package: mikeroletrans.role, name: SR_ROLEDEMO_FULL, suffix: hdbrole}: [258] insufficient privilege: Detailed info for this error can be found with guid '1CA26AEA7156BC4A830ECC314CC023F9' at Authorization/insuffPriv/impl/InsufficientPrivilegeThrow.cpp:365
[784]{227718}[62/875642600] 2026-03-09 06:09:01.272766 e REPOSITORY       activator.cpp(01133) : activateObjectsInternalFast2: ActivationID 4993, activation phase: Runtime Role runtime reported an error. Session error: insufficient privilege: Detailed info for this error can be found with guid '1CA26AEA7156BC4A830ECC314CC023F9' at Authorization/insuffPriv/impl/InsufficientPrivilegeThrow.cpp:365(258)
Check results with severity "error":
(ERROR, error code: 258, error message: insufficient privilege: Detailed info for this error can be found with guid '1CA26AEA7156BC4A830ECC314CC023F9' at Authorization/insuffPriv/impl/InsufficientPrivilegeThrow.cpp:365, object: {tenant: , package: mikeroletrans.role, name: SR_ROLEDEMO_FULL, suffix: hdbrole}, location: , time stamp: 2026-03-09,06:09:01.272, unformatted error message: insufficient privilege: Detailed info for this error can be found with guid '1CA26AEA7156BC4A830ECC314CC023F9' at Authorization/insuffPriv/impl/InsufficientPrivilegeThrow.cpp:365)
[784]{227718}[62/875642600] 2026-03-09 06:09:01.280703 e REPOSITORY       activator.cpp(01203) : Repository: Activation failed for at least one object;At least one runtime reported an error during activation. Please see CheckResults for details
[784]{227718}[69/-1] 2026-03-09 06:09:01.289385 e REPOSITORY       activator.cpp(00611) : Repository: Activation failed for at least one object;At least one error was encountered during activation. Please see the CheckResult information for  detailed information about the root cause. All objects without errors have been activated.

Highest return code is 8, CTS, import, deploy, GUID, _SYS_REPO, insufficient privilege, hdbrole  , KBA , HAN-LM-APP , SAP HANA Application Lifecycle Management , HAN-DB-SEC , SAP HANA Security & User Management , Problem