10.3    _SYS_BI_CP_ALL: A System-Generated Analytic Privilege

Only one system-generated analytic privilege is included with SAP HANA by default: The system-generated analytic privilege _SYS_BI_CP_ALL is a special analytic privilege that provides access to all information views and all data produced by an information view configured using classic XML-based analytic privileges. When a grantee is granted this analytic privilege, this privilege will override the restrictions of other classic XML-based analytic privileges that have been assigned to the same grantee; therefore, this privilege should only be granted to grantees that do not require any analytic privileges.

Based on testing and research, the _SYS_BI_CP_ALL analytic privilege doesn’t override SQL-based analytic privileges. When using SQL-based analytic privileges, all users require at least one custom analytic privilege referencing each information view they want to query. To grant full access to an information view, simply reference the information view without any defined restrictions. This approach will grant such grantees full data access to the referenced information view, even if other SQL-based analytic privileges are granted to the same user. Now, let’s look at the processes for creating analytic privileges.