The SAP HANA backup by Azure Backup uses a pre-registration script to create a HANA user to perform relevant backup and restore operations. Following are significant updates to the permissions required by the user:
- From HANA 2.0 SPS04 Rev 48 onwards, the HANA user required for backup and restore of SAP HANA does NOT require SAP_HANA_INTERNAL_SUPPORT role. The relevant information which was earlier accessible only via this support role is now accessible via public views. Run the pre-registration script (min version 2.0.7) to update the permissions for existing users or to create the right permissions for new users. This is a major improvement since the earlier support role could be given only to a couple of users and was not recommended for backup from a security-least-privileges principle.
- From HANA 2.0 SPS05 onwards, new roles (BACKUP ADMIN) are required for HANA Backup users. This version of script (2.0.7 onwards) adds the relevant roles automatically.
Learn more about what the pre-registration script does.
Learn more about SAP HANA backup from Azure Backup.