Authorizations for Backup and Recovery
To perform Backup and Recovery a user should need appropriate roles/authorization. this roles/authorization determines whether tasks are performed at DB/System levels.
The following authorization are required to perform the tasks.
Task / SAP Tool
|
System Database
|
Tenant Database
|
Tenant Database
(Through the System Database)
|
|---|---|---|---|
Backup (SAP HANA Cockpit)
|
BACKUP ADMIN or BACKUP OPERATOR (recommended for batch users only)
|
BACKUP ADMIN or BACKUP OPERATOR (recommended for batch users only)
|
DATABASE ADMIN
|
Backup (SAP HANA Studio)
|
BACKUP ADMIN
CATALOG READ
|
BACKUP ADMIN
CATALOG READ
|
DATABASE ADMIN
|
Backup (Native SQL)
|
BACKUP ADMIN or BACKUP OPERATOR (recommended for batch users only)
|
BACKUP ADMIN or BACKUP OPERATOR (recommended for batch users only)
|
DATABASE ADMIN
|
Recovery (SAP HANA Cockpit)
|
Operating system user
|
(not possible)
|
DATABASE ADMIN
|
Recovery (SAP HANA Studio)
|
Operating system user
|
(not possible)
|
DATABASE ADMIN
|
Recovery (Native SQL)
|
Operating system user
|
(not possible)
|
DATABASE ADMIN
|
Schedule Backup (SAP HANA Cockpit)
|
BACKUP ADMIN
|
BACKUP ADMIN
|
(Currently not supported)
|
Administration Tasks
For example, physically delete data backups, log backups, and obsolete versions of the backup catalog.
|
BACKUP ADMIN
|
BACKUP ADMIN
|
DATABASE ADMIN
|
BACKUP ADMIN, a user can perform all backup-related operations, including deleting backups and backup configurations.
BACKUP OPERATOR, a user can only perform backups
