Hi Gurus,
currently I am experimenting a little with creating Design-Time roles. Specially I am having an issue with creating the role for troubleshooting tasks.
The SAP HANA Administration Guide states you need the following permissions:
- Configure Traces
- TRACE ADMIN
- Delete trace files
- TRACE ADMIN
- Collect and Download diag files
- CATALOG READ
- EXECUTE on FULL_SYSTEM_INFO_DUMP_CREATE and FULL_SYSTEM_INFO_DUMP_RETRIEVE
- Delete diag files
- CATALOG READ
- EXECUTE on FULL_SYSTEM_INFO_DUMP_CREATE and FULL_SYSTEM_INFO_DUMP_DELETE
When I assign these permissions I can create the fullsystemdumps.
But when I want to download them or check which ones are available I don't see any.
In the trace file I see the entry.
[15235]{206582}[48/-1] 2016-03-02 12:42:23.432160 i Authorization query_check.cc(03387) : User U12600 tried to execute 'select FILE_NAME, FILE_SIZE, FILE_MTIME, '' as DATABASE_NAME from sys.full_system_info_dumps'
[15235]{206582}[48/-1] 2016-03-02 12:42:32.247532 i TraceContext TraceContext.cpp(00942) : UserName=U12600, ApplicationUserName=u12600, ApplicationName=HDBStudio, ApplicationSource=csns.admin.commands.AdministrationHandler$1$1.call(AdministrationHandler.java:338);csns.admin.commands.AdministrationHandler$1$1.call(AdministrationHandler.java:1);java.util.concurrent.FutureTask.run(FutureTask.java:266);java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142);java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617);java.lang.Thread.run(Thread.java:812);, StatementHash=6d6cfe8671a79e178e4cf726cff87171
[15235]{206582}[48/-1] 2016-03-02 12:42:32.247513 i Authorization SQLFacade.cpp(01447) : UserId(2884147) is not authorized to do SELECT on ObjectId(3,0,oid=2879320)
[15235]{206582}[48/-1] 2016-03-02 12:42:32.247551 i Authorization SQLFacade.cpp(01873) :
schemas and objects in schemas :
SCHEMA-131073-SYS : {} , {SELECT}
VIEW-2879320-FULL_SYSTEM_INFO_DUMPS : {} , {SELECT}
Then I saw that I also need the permission
- SELECT on the view SYS.FULL_SYSTEM_INFO_DUMPS
When I try to add this permission to the desing-time role I am creating I can't add this view.
I have tried adding this View using the user SYSTEM. I allways get the error that I don't have the right to manage this view.
Does any one of you have an idea how I can add the view to any other user to then add it to the design-time role?
Kind regards,
Niklas
