Tuesday, February 2, 2016

1823771 - Error HDB 02074: Insufficient rights: Unable to connect to HANA server, or Not enough rights to open view. SAP Lumira

Symptom
  • Unable to connect to HANA server instance:
unable.png
  • An error occurred: Data Source creation failed / The view does not exist or you have not enough rights to open it (HDB 02074)
74457_382_143_cache.png


Environment
  • Lumira 1.0 (formely Visual Intelligence)
  • HANA 1.0 SPxx


Reproducing the Issue
  1. Click "New Document"
  2. Select "From HANA"
  3. Connect & Select a View to acquire


Cause
  • Missing HANA Authorizations


Resolution
  • Often the quickest "catch-all" way of resolving this issue, is to assign the "Modelling" role to the problematic user, whilst logged-in into HANA Studio as SYSTEM:
permission_1.png
  • However, please be aware that this is not considered 'best-practice': Granting the Modelling role is not strictly necessary simply for viewing HANA models in a BI use-case.
  • It also has the undesirable side-effect of by-passing row restrictions imposed by Analytic Privileges.

Minimum Privileges to Use an Analytic View as a Dataset

TypePrivilegeHow AddedLumiraBehaviour When Not There
Object SELECT on _SYS_BI
HANA Studio UI or SQL:
GRANT SELECT ON SCHEMA "_SYS_BI" TO <User>
1.png
Cannot connect

''
Object SELECT on _SYS_BIC HANA Studio UI or SQL:
GRANT SELECT ON SCHEMA "_SYS_BIC" TO <User>
2.png
NOTE: Gives SELECT on all Column Views in _SYS_BIC resulting in all views being visible in Available Views. Alternatively give access to individual views. For example if you want user LUMIRA to see only analytic view MYPACKAGE/AN_MYVIEW you grant SELECT privileges on "_SYS_BIC"."MYPACKAGE/AN_MYVIEW" which can be done via HANA Studio security UI or directly with SQL statement:
GRANT SELECT ON "_SYS_BIC"."MYPACKAGE/AN_MYVIEW" TO LUMIRA;
Cannot see view in list

''
Analytic Analytic Privilege on <Analytic View> HANA Studio UI or SQL:
CALL GRANT_ACTIVATED_ANALYTICAL_PRIVILEGE('"<Package>/<Analytic Privilege>"','<User>');
NOTE: If the Analytic View uses the "Applicable to all Information Models" option then all Analytic Views will be accessible dependent on the grant of SELECT on _SYS_BIC above.
Alternatively, you can grant_activate on the global package '_SYS_BI_CP_ALL' to give access to read from all information model views:
3.png
Cannot see view in list
''

Minimum Privileges required for Publishing a Dataset to HANA:

TypePrivilegeDescription
Object SELECT on _SYS_BI
Object EXECUTE on REPOSITORY_REST
Package REPO.READ on .REPO_PACKAGE_ROOT
REPO.EDIT_NATIVE_OBJECTS on .REPO_PACKAGE_ROOT
REPO.ACTIVATE_NATIVE_OBJECTS on .REPO_PACKAGE_ROOT
REPO.MAINTAIN_NATIVE_PACKAGES on .REPO_PACKAGE_ROOT
 
When any required privilege for publishing is missing the following error will be seen in the user interface.
''


See Also
See the section "Important considerations for using SAP HANA" in the latest online user guide: http://help.sap.com/lumira
See also Note 1702224 - Disable password lifetime for technical users
See also Note 1775385- HANA Views are not visible in Explorer for Resolution:
  • Execute the following SQL statement as SYSTEM user and restart the indexserver process of SAP HANA Database:
  • update "_SYS_REPO"."SCHEMAVERSION" set db_schema_version = 16 where schema_type = 'bi'
  • After running the SQL some Cubes may be still missing due to having two tables and overlapping Cube IDs that cannot be migrated from BIMC_CUBES to BIMC_ALL_CUBES table.
  • Important: It is therefore highly recommended to reactivate again all Models after the workaround.


Keywords
permission lumira srv



Header Data

Released On 25.09.2015 22:11:44
Release Status Released to Customer
Component BI-LUM-DSK SAP Lumira (Desktop)
Priority Normal
Category How To

No comments:

Post a Comment