Before ingesting SAP HANA metadata into Dawiso, prepare your account for authentication by configuring a dedicated SAP HANA user account and grant it the necessary permissions.
Dawiso uses username and password authentication to connect. As Dawiso does not modify any data, only read access is required.
Connection prerequisites
- SAP Hana administrator account
Create a database user
Create a dedicated user (e.g., dawiso_user) using the following statement and assign it a strong password:
CREATE USER dawiso_user PASSWORD <password> NO FORCE_FIRST_PASSWORD_CHANGE;
- Replace
<password>with a strong password. - If you choose a custom username, make sure to replace it in all following statements.
The NO FORCE_FIRST_PASSWORD_CHANGE clause ensures that the password does not require a manual reset on first login, which is necessary for automated access.
Grant read permission on schema
Allow the newly created user to access metadata and data in the selected schemas using this statement:
GRANT SELECT, SELECT METADATA ON SCHEMA <schema> TO dawiso_user;
- Replace
<schema>with the actual schema name. Repeat this for every schema you want to ingest in Dawiso. SELECTgrants permission to read data from tables.SELECT METADATAallows Dawiso to access metadata (e.g., table names, columns, data types), which is essential for building the catalog.
Limited access
For environments with strict data access controls where only metadata should be ingested, use this more limited grant:
GRANT SELECT METADATA ON SCHEMA <schema> TO dawiso_user;
- Make sure to replace
<schema>with the actual schema name. Repeat this for every schema you want to ingest in Dawiso.
(Optional) Grant access to calculation views
To ingest metadata about SAP HANA Calculation Views, the user must be granted access to system tables where those views are stored:
GRANT SELECT METADATA ON SCHEMA <schema> TO dawiso_user;
To allow the ingestion of calculation views, run the following statements as well:
GRANT SELECT ON _SYS_REPO.ACTIVE_OBJECT TO dawiso_user;
GRANT SELECT ON _SYS_BI.BIMC_PROPERTIES TO dawiso_user;
These permissions:
- Allow Dawiso to discover and document Calculation Views, which are not stored in standard schemas but in SAP HANA’s internal system tables.
- Are only needed if you want to include these views in your metadata ingestion.