HANA Cust_User_admin

ZBASISSEC.sql

CREATE USER CUST_USER_ADMIN PASSWORD "Welcome@Welcome2023" NO FORCE_FIRST_PASSWORD_CHANGE; 
ALTER USER CUST_USER_ADMIN DISABLE PASSWORD LIFETIME; 

CREATE ROLE ZROLE_NS2_ADMIN_USER_ADMIN_ROLE; 
CREATE AUDIT POLICY ZAUDIT_NS2_CUST_USER_ADMIN AUDITING ALL ACTIONS FOR CUST_USER_ADMIN LEVEL INFO; 
ALTER AUDIT POLICY ZAUDIT_NS2_CUST_USER_ADMIN ENABLE; 

GRANT ZROLE_NS2_ADMIN_USER_ADMIN_ROLE TO CUST_USER_ADMIN;

GRANT USER ADMIN TO ZROLE_NS2_ADMIN_USER_ADMIN_ROLE with ADMIN option;
GRANT CATALOG READ TO ZROLE_NS2_ADMIN_USER_ADMIN_ROLE with ADMIN option;
GRANT ROLE ADMIN TO ZROLE_NS2_ADMIN_USER_ADMIN_ROLE with ADMIN option;

GRANT 	CREATE R SCRIPT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREATE SCENARIO	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREATE SCHEMA	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREATE STRUCTURED PRIVILEGE	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	STRUCTUREDPRIVILEGE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	DATA ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	DEVELOPMENT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	EXPORT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	IMPORT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	OPTIMIZER ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

GRANT 	REPO.EXPORT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	REPO.IMPORT	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	REPO.MAINTAIN_DELIVERY_UNITS	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	REPO.WORK_IN_FOREIGN_WORKSPACE	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

GRANT 	SESSION ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	TRACE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
    
GRANT 	TABLE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	ADAPTER ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	AGENT ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREATE REMOTE SOURCE	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;


GRANT 	WORKLOAD ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	WORKLOAD ANALYZE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	WORKLOAD CAPTURE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	WORKLOAD REPLAY ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

GRANT WEBIDE_ADMINISTRATOR	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT WEBIDE_DEVELOPER	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

grant REPO.READ on ".REPO_PACKAGE_ROOT" to "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;
grant REPO.MAINTAIN_NATIVE_PACKAGES on ".REPO_PACKAGE_ROOT" TO "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;
grant REPO.EDIT_NATIVE_OBJECTS on ".REPO_PACKAGE_ROOT" TO "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;
grant REPO.ACTIVATE_NATIVE_OBJECTS on ".REPO_PACKAGE_ROOT" to "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;

GRANT  DELETE,EXECUTE,INSERT,SELECT,UPDATE ON SCHEMA "_SYS_STATISTICS" TO "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;
GRANT  DELETE,EXECUTE,INSERT,SELECT,UPDATE ON SCHEMA "_SYS_SECURITY" TO "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;
GRANT  DELETE,EXECUTE,INSERT,SELECT,UPDATE ON SCHEMA "_SYS_BI" TO "ZROLE_NS2_ADMIN_USER_ADMIN_ROLE" WITH GRANT OPTION;

CALL GRANT_ACTIVATED_ROLE ('sap.hana.xs.ide.roles::Developer','ZROLE_NS2_ADMIN_USER_ADMIN_ROLE');
CALL GRANT_ACTIVATED_ROLE ('sap.hana.xs.ide.roles::EditorDeveloper','ZROLE_NS2_ADMIN_USER_ADMIN_ROLE');
CALL GRANT_ACTIVATED_ROLE ('sap.hana.xs.ide.roles::CatalogDeveloper','ZROLE_NS2_ADMIN_USER_ADMIN_ROLE');


======================================Removed=============================================


GRANT 	CLIENT PARAMETER ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREATE CLIENTSIDE ENCRYPTION KEYPAIR	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	CREDENTIAL ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	DROP CLIENTSIDE ENCRYPTION KEYPAIR	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	EXTENDED STORAGE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	LDAP ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	SSL ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

GRANT CERTIFICATE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT PARTITION ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	INIFILE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	LICENSE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	LOG ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	MONITOR ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	SAVEPOINT ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	SERVICE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	TENANT ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	VERSION ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	AUDIT READ 	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;  
GRANT 	PARTITION ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;   X
GRANT 	ENCRYPTION ROOT KEY ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;    X
GRANT 	SYSTEM REPLICATION ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;    X
GRANT 	RESOURCE ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	ALTER CLIENTSIDE ENCRYPTION KEYPAIR		to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT 	TRUST ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;

GRANT AUDIT ADMIN	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT AUDIT OPERATOR	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;
GRANT BACKUP OPERATOR	to	ZROLE_NS2_ADMIN_USER_ADMIN_ROLE	with ADMIN option;


CALL GRANT_ACTIVATED_ROLE ('XSA_APP_USER_ROLE','XSA_ADMIN');
CALL GRANT_ACTIVATED_ROLE ('XSA_DEV_USER_ROLE_ROLE','XSA_ADMIN');

CALL GRANT_ACTIVATED_ROLE ('XSA_APP_USER_ROLE','XSA_ADMIN_CUST');
CALL GRANT_ACTIVATED_ROLE ('XSA_DEV_USER_ROLE_ROLE','XSA_ADMIN_CUST');

CALL GRANT_ACTIVATED_ROLE ('XSA_APP_USER_ROLE','XSA_ADMIN_NS2');
CALL GRANT_ACTIVATED_ROLE ('XSA_DEV_USER_ROLE_ROLE','XSA_ADMIN_NS2');