Skip to Content

Spoiler Alert!

In this blog, you can find the answers to question 3 of the SAP HANA Academy XS Exam Quiz.

If you want to try and test your XS knowledge and know-how first, see

 

Forbidden

 

Answers

Answer 1

Correct

You used the wrong account but you probably already guessed that.

… but no …

XSA_ADMIN does not have access, by default, to the Web IDE.

As documented in Predefined XS Advanced Users of the SAP HANA Security Guide:

(…) an administrative XS advanced system user (XSA_ADMIN by default) is necessary to perform the initial setup of the application server, for example, granting other users the privilege to create spaces in a dedicated organization and so on. (…) Being a first-level administrator user with irrevocable privileges, the XSA_ADMIN has unlimited access to the Controller and therefore needs to be handled carefully. 

So it is by design that XSA_ADMIN does not have access to Web IDE (and you should keep it this way).

… and no.

Using SYSTEM will not help as this account also does not have access to the Web IDE, by default.

Same is true for the SYSTEM user, as documented in Getting Started with SAP HANA 2.0, express edition, for example

SYSTEM is the database superuser and is not intended for day-to-day activities in production systems. For better security, you can create other database users with only the privileges that they require for their tasks (for example, user administration), then deactivate the SYSTEM user.

Points: 0

 

Answer 2

Correct

You used the wrong account but you probably already guessed that.

… and yes … 

Out-of-the-box, XSA_ADMIN does not have access to the Web IDE. That’s right.

… and yes … 

Use any account that has the DEVX_DEVELOPER role collection.

.. and yes!  

For SAP HANA, express edition as CAL solution, you can use the XSA_DEV user, for example.

Points: 5 (at least)

 

Answer 3

Correct.

You used the wrong account but you probably already guessed that.

… but no … 

By default, XSA_ADMIN can only access the XSA Administration application and needs to be granted access to the web IDE.

That would not be such a great idea. It is possible but the opposite of a best practice (indeed, a worst practice). See, the comments for answer 1.

… and nope!  

Use HANA studio to grant the sap.hana.ide.roles::Developer role to XSA_ADMIN. 

Points: 0

 

While you certainly can grant the Developer role to XSA_ADMIN using SAP HANA studio this would not solve the issue at all. It would allow XSA_ADMIN to access XS classic model applications, like the SAP HANA Web-based Development Workbench but not to the XSA application SAP Web IDE for SAP HANA.

For more information, see

 

SAP HANA Studio: Edit User, Add Role

 

SAP HANA Web-based Development Workbench

 

Answer 4

Really? Not correct.

You might want to read up a bit about the topic. For a good introduction, see, for example, Lucia Subatin’s excellent series

Points: 0

 

Documentation

For more information, see:

Blogs, Tutorials, Wikis, FAQ

SAP Help Portal

 

Thank you for watching

The SAP HANA Academy provides technical enablement, implementation and adoption support for customers and partners with 1000’s of free tutorial videos.

For the full library, see SAP HANA Academy Library – by the SAP HANA Academy

For the full list of blogs, see Blog Posts – by the SAP HANA Academy

 

To report this post you need to login first.

Be the first to leave a comment

You must be Logged on to comment or reply to a post.

Leave a Reply