Hi, my name is Denys van Kempen, SAP HANA Academy.
You are watching a video tutorial that is part of a series about the SAP Business Technology
Platform certification SAP Certified Technology Associate - SAP HANA
Cloud Provisioning and Administration.
This tutorial covers the topic area Security and User Management
This video was recorded in August 2022.
For the latest tutorials on the topic, please check the playlist.
As a reminder, here we have the topic areas covered in the exam.
Security and User Management is the last one on the list.
15% weight, about 12 questions.
about creating users, creating roles, and auditing, the topic of this tutorial
We are connected here to the SAP HANA cockpit
There is a view for security and user management
with a card for Auditing
a warning is displayed: basic setup not completed
we can see that zero audit policies are enabled and very little space used for the audit trail,
a few kilobytes
Select the card to open the app
SAP provides a basic setup for auditing, a setup wizard
which creates audit policies on the authentication provider, authorizations, certificates, and
so on
here we can see the audited actions
on either all events, or limited to only unsuccessful or succesful events,
with a corresponding audit level, targeted users, objects and retention period,
Alternatively, we can also create an audit policy manually.
Give it a name,
select the action status: successful, unsuccessful, all
the action,
these are bundled in categories: authentication provider management, backup and recovery,
certificates, and so on
you can select to audit all actions, although the recommendation is to audit with focus
as otherwise the audit trail will quickly take up a lot of space
select the audited users,
when selecting all actions, all users is no longer an option, just inclusion or exclusion
the audit level: info, warning, alert, critical, emergency
the retention period,
as mentioned, the audit trail consumes memory and disk space, choose a retetion period as
short as possible
and finally, in step 6 enable or disable the policy
a review screen,
save
and we find our audit policy listed,
we can request to show the corresponding SQL statements, should we want to recreate the
same policy on another database instance
or delete the policy
THere are a number of SAP defined default policies, you won’t find these on the SAP
HANA platform, on premises
for example, any fiddling on the SYSTEM user of the tenant DB, which, as you may recall,
is for exclusive usage of SAP, and shoud not be accessible
the other policies serve a similar purpose
to view audit entries, select the audit trail tab
you can delete audit entries or save as CSV to external storage for compliancy purposes,
For more information, see the inline help
which links to the guide SAP HANA Cloud Database Administration with SAP HANA cockpit
where the topic is covered
with additional links to the Auditing topic in the SAP HANA Database Security guide
with best practices and recommendations for creating auditing policies
and that’s it for auditing
You can find the links to the resources mentioned in the description of this video below.
This video tutorial was recorded by Denys van Kempen, SAP HANA Academy.
Any good?
Give us a like, and for updates, don’t forget to subscribe.
Thanks for watching.