
SAP HANA Administration Guide for SAP HANA Platform > Resolve Insufficient Privilege Errors.1809199 – SAP HANA DB: Debugging user authorization errors.Now the user is free to proceed with their operation or preview. You executed the command on the wrong database, SYSTEM Database instead of the Tenant or Tenant instead of SYSTEM Database etc.Īt this point the correct privilege has been identified and assigned to the user.Indexserver.ini -> -> insufficient_privilege_error_details_retain_duration = 144 If the retention time has expired then recreate the issue and obtain a new GUID. The information associated with the GUID is stored by default for 144 hours. The retention time might have expired.NO result from SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS? Assign the missing privilege to the Database user. User DEVINEM is missing the object privilege SELECT with option ‘grantable to others’ for table DATA_BANK.SECURITY_BASE.ĥ. Here is another example: GUID CREATE_TIME CONNECTION_ID SESSION_USER_NAME CHECKED_USER_NAME PRIVILEGE IS_MISSING_ANALYTIC_PRIVILEGE IS_MISSING_GRANT_OPTION DATABASE_NAME SCHEMA_NAME OBJECT_NAME OBJECT_TYPEĠD9EB27F79D2A745AECE1969DF5CB1A9 10:59:52.278 AM 398,715 SYSTEM DEVINEM SELECT FALSE TRUE AB1 DATA_BANK SECURITY_BASE TABLEĪgain, made more readable looks like this:

Here user DEVINEM is missing the object privilege SELECT for table _SYS_REPO.EMPLOYEE_NAME. GUID CREATE_TIME CONNECTION_ID SESSION_USER_NAME CHECKED_USER_NAME PRIVILEGE IS_MISSING_ANALYTIC_PRIVILEGE IS_MISSING_GRANT_OPTION DATABASE_NAME SCHEMA_NAME OBJECT_NAME OBJECT_TYPEī7874469081CB649A35CB7D514105DFC 10:59:52.278 AM 348,254 DEVINEM DEVINEM SELECT FALSE FALSE AB1 _SYS_REPO EMPLOYEE_NAME TABLE The result will present the name of the missing privilege and the database user which is missing the privilege. Execute this command: call SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS('', ?) įor example, with GUID 6D5E848AF9C6E049BE2EEF2E134AE1E1 the command is: call SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS ('6D5E848AF9C6E049BE2EEF2E134AE1E1', ?) Ĥ. (GRANT EXECUTE ON GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS to ).ģ.

Log to the corresponding SYSTEM Database or Tenant Database with a user that has EXECUTE object privilege on procedure GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS.

Determine if the command is executed on the SYSTEM Database or a Tenant Database.Ģ. : insufficient privilege: Detailed info for this error can be found with guid ‘’ġ.

When performing an operation or querying a view without the necessary privilege you will receive the following error: A new error message is presented when the user does not have the required permission to run the operation. Now there is a new, simplified way to analyze authorization errors.
