Step-by-step: Setup SDI for your HCP account (part 2)
Welcome to part 2 of this blog with step-by-step instructions on how to setup SDI for HCP.
Before starting here, make sure you have done all steps in part 1 or read the introduction here: Smart Data Integration available for HCP
4. Create HANA users with the required permissions
For connecting your SDI agent to HCP you will need two HANA users:
- One can be your personal user, which you also use to connect to the HANA web IDE, and which you will use to configure the agent and manage adapters. We’ll call this user SDI_USER.
- The other one is a technical user used by the agent for the continuous connection to the HANA on HCP. We’ll name this user the SDI_DP_AGENT.
You can create new users with your SYSTEM user, by going to the HANA Cockpit and select “Manage Roles and Users”. When you create these new users, don’t forget that the password you set will need to be changed at first login, so login at least once with each of these users to trigger the password change window.
Both of these users will need some specific authorizations. We’ll cover here a quick summary, the details about all the authorizations (some optional) are documented here: Assign Roles and Privileges – Administration Guide for SAP HANA Smart Data Integration and SAP HANA Smart Data Quality -…
The SDI_USER will need these authorizations:
- Role: sap.hana.xs.ide.roles::CatalogDeveloper
- Role: sap.hana.xs.ide.roles::EditorDeveloper
- Role: sap.hana.xs.ide.roles::SecurityAdmin
- Application privilege: sap.hana.im.dp.admin::Administrator
- System privilege: AGENT ADMIN
- System privilege: ADAPTER ADMIN
- System privilege: CREATE REMOTE SOURCE
The SDI_DP_AGENT will only need this authorization:
- Application privilege: sap.hana.im.dp.proxy::AgentMessaging
5. Install and configure the SDI agent to connect to your cloud instance
Final step in the setup is to install and configure the on-premise agent. Before starting, let’s look at the prerequisites:
- You will need a Windows or Linux (virtual) server. Supported operating systems are Windows 2008, 2008 R2, 2012 and 2012 R2, for Linux SuSE 11 and ReHat 6.3 and 6.5. For a simple test you could also use your windows desktop – not officially supported, but working fine for me.
- You will also need JAVA 7 installed on your machine, so make sure it’s installed and that the JAVA bin directory is added to the PATH variable so that SDI can find it.
- You need to have a Windows user created which will be used to start and run the data provisioning agent service.
- Your machine needs to be able to communicate to the internet. If you are within a corporate network, this will probably need to go through a proxy server, make sure you know the name and port for the proxy server you can use.
Next you run the installer that you find in the package downloaded in step 1 (hdbsetup.exe). Provide the installation path and the Windows user and password and accept all other default values. The installation will only take a couple of minutes.
Once the data provisioning agent is installed, you can run the configuration tool to connect the agent to your HANA instance in the cloud. To start the configuration tool, go to the installation directory, navigate to the ConfigTool folder and start dpagentconfigtool.exe (defaul location: C:\usr\sap\dataprovagent\configTool\dpagentconfigtool.exe).
Once the data provisioning agent is installed, you can run the configuration tool to connect the agent to your HANA instance in the cloud. To start the configuration tool, go to the installation directory, navigate to the ConfigTool folder and start dpagentconfigtool.exe (default location: C:\usr\sap\dataprovagent\configTool\dpagentconfigtool.exe).
In the Agent Configuration tool, click on “Connect to HANA” and complete the fields in the connection information screen:
- Check “HANA on Cloud” and “Use HTTPS“. This will trigger an automatic import of SSL certificates once you click connect later on.
- Provide the HANA hostname. You can get this from the HANA cockpit URL, remove the “https” from URL and remove everything after ondemand.com. What’s left is your HANA hostame.
- Specify the SDI user, and password like the SDI_USER created in step 4.
- If you connect from within a network that requires a proxy to access the internet, check the “Use HTTP proxy” and specify the proxy hostname and port. Check with your local network admin for these values, or re-use what is setup for you in your browser settings. If you connect from home, you usually don’t need a proxy.
- Finally specify the technical user’s user name and password , like the SDI_DP_AGENT as created in step 4. There is an option to auto-create this user, but this will only work if your SDI_USER has the authorization to create new users.
Once done click Connect and if any error message is returned, read carefully to see what’s wrong. If you don’t see any errors, your agent is successfully connected to the HANA database on HCP.
Once you have successfully connected, you can also register the agent. Click on “Register Agent” and provide a name that uniquely identifies this agent. Tip: it’s useful to include the machine name as part of the name, so that later when you have multiple agents, from within the HANA WebIDE, you will be able to identity where an agent is physically located.
Congratulations, you have setup SDI for HCP now. Let’s add one final step to test out a simple scenario for loading a file into HANA on HCP: Step-by-step: Setup SDI for your HCP account (part 3 – testing things out)