Skip to Content
Technical Articles
Author's profile photo Dharmesh Kumar

How to resolve error 403 – Forbidden when accessing HANA web-based development workbench


You already have a HANA database running in your SCP trial account.



In this blog post, I will discuss a common problem which a developer face when accessing HANA Web-based development workbench.

After creating a HANA DB instance, when you want to access the catalog to create, edit, execute or manage HANA DB artifacts, you might have come across an error as below.


If you face this error, then please follow these steps:

  1. Go to SAP HANA Cockpit link in SCP


2. Once you are successfully logged in, you will see this workbench menu, Go to Security


3. When prompted, enter user name as ‘SYSTEM’ and password which you provided at the time of creating new DB/Schema.


4. Add the following roles for user ‘SYSTEM’ and save


Tool Description Required Role
Editor Inspect, create, change, delete and activate SAP HANA repository objects sap.hana.ide.roles::EditorDeveloper
Debug server-side JavaScript code sap.hana.xs.debugger::Debugger
Catalog Create, edit, execute and manage SQL catalog artifacts in the SAP HANA database sap.hana.ide.roles::CatalogDeveloper
Security Create users and user roles sap.hana.ide.roles::SecurityAdmin
Traces View and download SAP HANA trace files and set trace levels sap.hana.ide.roles::TraceViewer


5. Now switch to ‘Catalog’ using the navigation link.



Once you have followed the steps mentioned in this blog post, you should be able to access the Catalog or Editor and manage HANA artifacts.


Hope this blog post was helpful to you!!




Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Michael Eaton
      Michael Eaton


      This is a useful tip, but as using the SYSTEM user for development isn't recommended, adding a new user and granting them the roles you show above would be the recommended approach.


      Author's profile photo Dharmesh Kumar
      Dharmesh Kumar
      Blog Post Author

      Thank you for your suggestion Michael, I will make the required changes.

      Author's profile photo Jan Hofmann
      Jan Hofmann


      I am facing the issue "403 - Forbidden" when accessing HANA Web-based development workbench, so I followed this blog and wanted to add the mentioned roles. Unfortunately, I am not able to assign these roles to any user, following example with user "TEST_USER" even I try to assign these roles with user "System".

      Could not execute 'grant "sap.hana.ide.roles::EditorDeveloper" to TEST_USER'
      Error: (dberror) [258]: insufficient privilege: Cannot grant activated roles: line 1 col 6 (at pos 6)

      Which permission is needed to grant these permissions again. I am spinning in circles. 😉

      Thanks and best regards

      Jan Hofmann