Minimum grants required for m_expensive_statement_trace

[Parag_Jhade]

Hi All,

Is there a least‑privilege way to create a SAP HANA user who can only open the SQL Console in HANA Studio (no administration or monitoring features), and has read‑only access to SYS.M_EXPENSIVE_STATEMENTS, with client access restricted so they can connect via HANA Studio/JDBC but are blocked from Cockpit/Database Explorer and other clients?

Thanks & Regards,

Parag Jhade

[HakanHaslaman]

In SAP HANA, access to SYS.M_EXPENSIVE_STATEMENTS requires monitoring privileges and cannot be granted in full isolation. Restricting a user to only HANA Studio/SQL Console while blocking Cockpit or other clients is not supported via HANA authorization; such restrictions must be enforced outside the database (e.g. network or tool level).

[Parag_Jhade]

Thank you for your response. I would like to inquire about how restrictions can be enforced using HANA Studio.