Remote Access is a tool within the SAP HANA framework that allows engineers to control your system. This SAP HANA remote access feature lets an SAP support team member diagnose and troubleshoot any issues you may be having when working with the in-memory database. Our guide will present you with a basic overview of SAP HANA remote access, how it works, how to set it up, the connection types it might use, and the kinds of permissions your administrator will need to grant in order to give you the ability to use remote access.
How to Set Up Remote Access
You will use the database’s Support Portal to open a connection for SAP HANA remote access. There are three main steps involved in securing a service connection with an outside source. We will take you through each of the steps in the various sections below.
Select the System
You’ll need to select the system to which you want to grant remote access. Once you have chosen the system, you will have to set up the scope of the remote access you are giving to the engineer or others that would not ordinarily have access to that system. You may wish for outside sources to have access to specific parts of a system or for them to see only a set number of incidents that are specific to the issue you are experiencing.
Set Up the Connection Type
There are numerous connection types from which you can choose when enabling SAP HANA remote access. We will take you through the list of available connections and their categories and provide you with a brief description of each one.
SAP GUI Connections
- R/3 Support: Uses the SAP GUI to provide remote access to the system
- R/3 Support with SSO: Identical to an R/3 Support connection but adds SSO
- GUI with Browser: Uses the SAP user interface and the browser to enable remote access to the system
- SAP NI Connection: Allows access to the system for any client with the use of SAP NI protocols
SAP Solution Manager Connections
- Solution Manager: Gives access to the solution graphic within Solution Manager
- Solution Manager with Diagnostics: Provides system access and services to the diagnostics portion of the solution manager
Java Connection Types
Note that these connections may pertain to HTTP-based connections or any other that enable services on a Java-based system.
- NW Mobile Java: Provides access to Netweaver Data Orchestration Engines
- HTTP Connect with URL: Gives access to applications using a web browser
- HTTP Tools: Gives access using a combination of client tools and HTTP protocols
- Business Client: Provides a web connection using SAP Business Client
- HTTP Connect with SSO: Identical to an HTTP Connect with URL but uses SSO instead
- LoadRunner: Enables remote testing of a particular load
- Debug: Provides debugging support for Java applications
- JVM Tools: Allows engineers to debug JVM Tools
More Resources for the SAP HANA Enthusiasts:
Operating System Connection Types
- GoToAssist: Allows desktop and remote sharing thanks to LogMeIn
- Netviewer: Enables both sharing access and remote collaboration
- Terminal Server: Allows the sharing of applications using Windows Terminal Server
- WTS with NLA: Identical to Windows Terminal Server connections but adds NLA support
- Citrix: Enables you to share applications via the Citrix Metaframe
- AS/400-5250: Grants operating system access to all AS/400 server types
- Secure AS/400: Allows access to secure AS/400 server types
- SSH: Enables you to connect to customer systems via SSH
- VNC: Allows a connection to customer systems using VNC
Other Connection Types
- JDBC: Allows a connection to any database using JDBC or ODBC connections
- SAP HANA: Allows a connection to any remote SAP HANA database
- SAP HANA MDC: Enables a connection to any Multi-Database Container within the SAP
- Upgrade Assistant: Allows you to use Upgrade Assistant remotely
- SAP-Inst GUI: Enables remote access to the SAP-Inst GUI
Specify the Time Frame
The final step in enabling SAP HANA remote access is to specify how long someone has access to the system. If you have some knowledge of the incident that is occurring within the system, particularly if it seems to be repeating itself, you can grant access to the system for a limited amount of time. You will have the option to extend this time frame if you find that it is not sufficient for your needs. Allowing a time frame for remote access is a key component of security within SAP HANA. Note that you can go through all of these processes after you open the Service Connector program. You can usually do this via the “stfk.oez” executable file.
SAP HANA Remote Access Requirements
Your S-User ID needs special permissions to allow remote access to the database in which you are working. The primary permission that you’ll need with your ID is the Open Remote Connections authorization. You can check your ID and username for a list of the existing permissions associated with it. If you do not have Open Remote Connections somewhere in your permissions list, you will need to contact your administrator and request that they add it.
There may be instances in which you will need to tweak some of the steps we’ve presented here. You will need to access the Secure Area to add or modify login data that SAP uses for remote access. Once you click on “Change Access Data,” you will have four options that you can choose.
This allows you to change existing data or add new data.
2. History Log
You can view all previous Secure Area access attempts here and view modified data.
3. Maintain User Restricted View
This allows you to limit the amount of information employees can see with regard to a particular incident.
4. Close Window
You can use this button to exit the Secure Area.
Our overview shows you the basic steps you’ll need to follow to grant SAP HANA remote access permissions to other users. Your administrator may have more information on what connection types will work best for any incidents. Please share your thoughts with us in the comments section.