Who takes care of HANA security and compliance: Application teams, security, GRC, DBA, basis?

Hi all,

When you have a standalone HANA;

1. there will be end-users who will access HANA views thru BOBJ,
2. there will be developers using HANA studio to build views /SQLs etc
3. there will be developers creating tables(database activity) etc,
4. some admin stuff to create users, roles, audit activities,
5. Typical GRC activities/segregation of duties etc

If you think traditional security models, application/security team takes care of the end users, developers, but usually DBA/BASIS team takes care of database access/creating tables..

What do you see in your environment/clients?

Appreciate your thoughts

Cheers

Tansu