cancel
Showing results for 
Search instead for 
Did you mean: 

SAP Datasphere - PAL APL insufficient privileges

albertosimeoni
Participant
0 Kudos

Hello experts,

I try to call a PAL procedure from a Datasphere SQL View (type table function).

The SQL View compile correctly.

But the database user associated with the space ("SPACE_XX") doesn't have the right permission.

I have created a database user inside the space ("SPACE_XX#DB_USER") and from the database explorer the function works.

The problem seems that the database user associated with the space doesn't have the AFLPAL role associated with it.

Could this be an improvement request, to grant this role ($$global$$.scriptServerAccess to the database user associated with the space?

Best Regards,

Alberto

View Entire Topic
AndreasForster
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hello albertosimeoni, Your Datasphere Database User might not have APL/PAL activated?

albertosimeoni
Participant

Hello Andreas,

Yes the database user (SPACE_XX#DB_USER) has APL/PAL activated.

And from database explorer the function calls work.

This flag grant a role to the database user created under space management.

But to use those libraries inside datasphere sql views (inside the modeling web pages of datasphere), we need this role to be assigned to the database user of the space itself ( SPACE_XX).

Edit:

the role $$global$$:ScriptServerAccess is managed by Datasphere application, user DWC_TENANT_OWNER, so there is no way to assign the correct role to the user used by the space itself.

Best regards,

Alberto

glenleslie
Advisor
Advisor
0 Kudos
Note that you will only see the PAL check box as shown in the response if you have the HANA Script Server enabled via Tenant Configuration ( steps here: https://help.sap.com/docs/SAP_DATASPHERE/9f804b8efa8043539289f42f372c4862/287194276a7d4d778ec98fdde5... )