Article ID: 82670
Article Type: Troubleshooting
Last Modified:
[hdbsql execution Failed. * 258: insufficient privilege: Detailed info for this error can be found with guid '9B185BF1B1769D4D8761445DCF618192' SQLSTATE: HY000]. Contact HANA DBA to assign the missing permissions [BACKUP ADMIN,CATALOG READ,DATABASE BACKUP ADMIN,INIFILE ADMIN] for the DB user [MY_BACKUP_USER] and retry.
The backup/ restore job fails with the following error:
Error code: [155:2] Description: [hdbsql execution Failed. * 258: insufficient privilege: Detailed info for this error can be found with guid '9B185BF1B1769D4D8761445DCF618192' SQLSTATE: HY000]. Contact HANA DBA to assign the missing permissions [BACKUP ADMIN,CATALOG READ,DATABASE BACKUP ADMIN,INIFILE ADMIN] for the DB user [MY_BACKUP_USER] and retry. Source: abc.commvault.com, Process: CIHanaAgent
SAP HANA database user being used for the operation lacks required permissions.
Contact SAP HANA database administrator to troubleshoot using the following instructions:
1. If you use the SAP HANA user store, verify that the user associated with the HDBUSERSTORE key has the correct permissions:
Backup operations: The DBA COCKPIT privilege is required. For more information, go to the SAP Documentation site, DBA Cockpit for SAP HANA: Authorizations. In the Database Users section, look at the Customer-specific user row.
To add required backup operation privileges to the SAP HANA database user, run the following SQL command:
**GRANT BACKUP ADMIN, DATABASE BACKUP ADMIN, CATALOG READ, INIFILE ADMIN TO MY BACKUP USER**
Where MY_BACKUP_USER is the HANA database username. The user must be existing for the SYSTEMDB and all tenant databases, and the user must have the same password for each database.
Restore operations or clone operations: To run the CREATE or RENAME statements, the DATABASE_ADMIN privilege is required. For more information, see the SAP documentation site, System Privileges.
To add required restore operation privileges to the SAP HANA database user, run the following SQL command:
**GRANT BACKUP ADMIN, DATABASE BACKUP ADMIN, DATABASE RECOVERY OPERATOR, CATALOG READ, INIFILE ADMIN, DATABASE START, DATABASE STOP, TRACE ADMIN, SERVICE ADMIN TO MY RESTORE USER**
Where MY_RESTORE_USER is the HANA database username. The user must be existing for the SYSTEMDB and all tenant databases, and the user must have the same password for each database.
Note: The DATABASE BACKUP ADMIN and DATABASE RECOVERY OPERATOR privileges are supported on SAP HANA 2.0 SPS05 and more recent versions.