Haun - SAP HANA Security Guide

SAP HANA is used to power SAP applications and host data from a variety of sources. The applications it powers and the data it hosts are often critical to an organizations operations. Failure to properly secure an SAP HANA environment often can lead to system instability and a lack of data integrity; therefore, SAP HANA security must be given the proper attention and scrutiny.

This book was written with the goal of educating readers about SAP HANA security. We focus on key aspects of the SAP HANA security model, including user provisioning, role creation, privilege assignment, encryption, auditing, and authentication. We also discuss the tools used to create and maintain an SAP HANA security model. Such information is critical for SAP HANA security architects to implement security models for their organizations. This information is also necessary for organizations to protect the data hosted within SAP HANA and to maintain the reliability of systems that rely on SAP HANA.

This book will help security teams, BASIS teams, security consultants, and anyone looking for a one-stop guide to implementing an SAP HANA security model.

We recommend the following prerequisites for readers of this book:

• General knowledge of SAP HANA Studio
• General knowledge of SQL
• Experience working in areas of database administration
• Experience working with database objects such as tables, views, and stored procedures

Each chapter is structured to offer background and theory for specific security-related concepts. Many chapters conclude with a case studycentering on the fictitious E-Corporationfor a real-world application of the topics covered in the book. Our goal is to provide you with technical knowledge and a unique perspective on how security has been implemented in the field based on real customer engagements.

The book is structured into 18 chapters. The Introduction and Chapters one through four introduce SAP HANA, SAP HANA security, SAP HANA Studio, privileges, and database objects. Chapters four, five, and six introduce users and roles. Chapters seven through eleven discuss the various privilege types within SAP HANA. The remaining chapters discuss SAP HANA authentication, encryption, lifecycle management, audit policies, security troubleshooting, and general recommendations for securing your SAP HANA environment.

SAP HANA represents the next evolution of data management for many organizations. It also powers critical applications used to manage an organization. This makes SAP HANA a valuable asset for many organizations. Because of its importance, it must be secured. In the Introduction, we provide an overview of SAP HANAs hardware and software layers. We introduce basic concepts of SAP HANA security and list several reasons that securing your SAP HANA environment is important.

This chapter introduces SAP HANA Studio, a key tool used to manage SAP HANA security. We explain how to navigate SAP HANA Studio perspectives. We also provide a detailed workflow to help identify key security management areas within SAP HANA Studio, including the security console and SQL console.

This chapter introduces the key privilege types available within SAP HANA. We provide a summary of each privilege type, including system, object, analytic, package, and application privileges. We also discuss how SAP HANA validates the assignment of privileges for users and roles.

This chapter explains the role catalog objects play within an SAP HANA system. We review the process for creating standard and repository-based schemas. We also review the process used to create other standard and repository-based catalog objects. Its important to understand the nature of catalog objects, because it pertains to object privileges and the overall SAP HANA security model architecture.