In combination with a Lightweight Directory Access Protocol (LDAP) server, SAP HANA supports the following security tasks:A. User group assignment, where user groups defined in LDAP can be mapped to roles in SAP HANA, allowing for group-based access control.D. Role assignment, where SAP HANA roles can be assigned to LDAP groups or individual users based on their LDAP attributes, facilitating centralized role management.LDAP is not directly used for user creation or configuring password policies in SAP HANA, as these aspects are typically managed within the SAP HANA system or the LDAP directory itself.References= SAP HANA Security Guide, which explains integration with LDAP for user and role management.
Database Security

TheINIFILE ADMINsystem privilege is required to restrict features for tenant databases in the SAP HANA cockpit. This privilege allows administrators to manage and modify configuration files (.ini files), which is crucial for controlling database features and restrictions.
References=The requirement for the INIFILE ADMIN privilege for managing tenant database features is detailed in SAP HANA security documentation and SAP help resources.
Database Administration

Using the backup scheduler in the SAP HANA cockpit, you can schedule the following types of backups:
* Incremental backup: Captures only the changes since the last complete backup, minimizing storage requirements and speeding up the backup process.
* Complete backup: Provides a full backup of the entire database, ensuring that all data is captured at a specific point in time.
* Log backup: Regularly backs up the transaction logs, allowing for point-in-time recovery and minimizing data loss in the event of a failure.
References=The SAP HANA cockpit's backup scheduler functionality and options are described in the SAP HANA Cloud backup and recovery guides, detailing how to configure and manage various types of backups.
Backup and Recovery

TheSQL Consoleis the tool used within the SAP HANA Database Explorer to execute SQLqueries on the SAP HANA Cloud database. This web-based interface allows users to directly interact with the database, running SQL commands to manipulate data and schema objects.
References=Information about the SQL Console and its functionality in executing SQL queries can be found in the SAP HANA Cloud documentation and tutorials available on SAP's official help portal.
Database Administration

The default single sign-on method when usinghdbsql, the command line interface for SAP HANA, is Kerberos based. This method leverages the Kerberos protocol to authenticate users without transmitting passwords, enhancing the security of connections especially in enterprise environments where Kerberos is commonly used as part of the security infrastructure.References= SAP HANA Administration and Security documentation, which discusses authentication mechanisms supported by SAP HANA including the use of Kerberos for single sign-on.
Database Security