SAP Basis Basics Part 43

Resolve Insufficient Privilege Errors (HANA)

Use the built-in procedure GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS to find out which privilege a user is missing when he or she gets an “insufficient privilege” error. (Example insufficient privilege: Detailed info for this error can be found with guid ‘4043AC8661D7D64B82449FCD18D23D1B’)

Prerequisites
- You have the EXECUTE object privilege on GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS.
- You have the GUID of the error received by the end user experiencing the authorization issue.

Procedure
Execute the procedure (with the cockpit, studio, or hdbsql) GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS:
call SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS (‘<GUID in “insufficient privilege” error>’, ?)

in this example:
call SYS.GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS (‘4043AC8661D7D64B82449FCD18D23D1B’, ?)

Results
The result provides you with information about the first authorization check performed for the particular user connection.

If the user is missing several privileges, only the first missing privilege determined by the authorization check is returned. You can find out what other privileges are missing by successively running GET_INSUFFICIENT_PRIVILEGE_ERROR_DETAILS with the GUID returned with each subsequent error message.