In HANA XS classic, to get access on all analytical privileges in the system _SYS_BI_CP_ALL can be granted to an user(directly or via a role), generally for developers/ HANA Admin. But in HANA cloud or XS advanced using HDI container there is no such analytical privilege exists for developers.

Even though Developer has got the access on all HDI container schema objects like tables and CVs, still get authorization error while accessing CVs that have analytical privileges as there is no CP_ALL. So what is the alternative solution?

The diagram below explains it.  In this example, using XS classic Developer got _SYS_BI_CP_ALL AP, so full access on all analytical privileges is applied.

In the second part,  using HANA cloud HDI container owns all the CVs instead of _SYS_BIC schema and there is no _SYS_BI_CP_ALL AP. So we are going to create a new AP(AP_ALL) and add all the CVs that have APs.  Also ,in definition of Developer AP, there will be no restrictions defined on any of the CVs used. that’s it, simple!.

then Dev role can be created on this AP and granted to Developers/Admin to get full access on all APs. There wouldn’t be any change in business user roles, it is same as before to the most part.

Thanks

Sreekanth