SAP HANA DB supports 2 types of roles:

1. Catalog Roles  that can be created from HANA Studio –> Security –> Roles option
2. Repository Roles that can be created either from Project Explorer or from Web IDE –> Editor –> Package

When a repository role is created and activated, the run-time version is created which will be owned by the user _SYS_REPO. However, when the repository (design time) role is deleted, it will not delete the run-time version automatically. Follow the below steps to delete the run-time version along with the design-time role.

1. Navigate to the package that has the role.
2. Right-click and choose Delete.
3. Right-click on the package and choose Activate All.
4. Capture the package in a Delivery Unit (DU)
5. Export the DU from the source system
6. Import the DU in the target system

This process will remove the runtime version of the HANA role along with the designtime role.

NOTE: You have to have system privilege ROLE ADMIN to perform this activity.

• Author
• Recent Posts

Raghu Boddu

SAP Security & GRC SME at SAP HANA HUB

As a specialist in SAP Security & GRC, Raghu is well known to the SAP community. A forensic expert with deep roots in SAP, governance, compliance, and security, he has over 20 years of industry experience. Because of Raghu's passion for technological advancements, he was able to develop many SAP certified solutions and implement various automations.

Latest posts by Raghu Boddu (see all)

• 6 Tips to secure HANA DB - January 24, 2022
• Best Approach for building SAP HANA Privileged based roles - July 27, 2018