SAP HANA Cockpit – configuration, part 2/2

One week ago I wrote about installation SAP Hana Cockpit – here. Today is time to write few word about configuration… I only mention, if You’re looking for information about enabling ssl, please look to this article.

Configuration steps

1. Connect to the Cockpit Manager and sign in as the COCKPIT_ADMIN user. The COCKPIT_ADMIN user and corresponding master password were established during cockpit installation.
2. Create cockpit users.
3. Register a database in Cockpit Manager
4. Create database groups and add registered earlier database to each group.
5. Assign cockpit users access to one or more groups of resources.

I wrote in part 1/2 how to determine ports for SAP HANA Cockpit and Cockpit Manager. For me these are:

Cockpit Manager: https://hostname:51029 

Cockpit Admin: https://hostname:51027 

SAP Hana Cockpit contains multiple tiles, organized into sections:

• Monitor Landscape section contains tiles that let you access registered resources.
• Manage Landscape section contains tiles that let you manage the SAP HANA cockpit, browse database objects, or execute SQL statements.

In the right corner Hana Cockpit You find useful buttons:

1. To refresh the display on demand.
2. Here You can activate/stop a refresh interval.

The Cockpit Manager configuration tool is an application separate from the SAP HANA cockpit itself. Launch the Cockpit Manager using the URL that was provided during cockpit installation.
The functionality visible in the Cockpit Manager depends on the role(s) assigned to the user accessing the Cockpit Manager. The administrator roles of cockpit administrator, cockpit user administrator and cockpit resource administrator can perform the tasks necessary to enable users of SAP HANA cockpit to manage and monitor resources. These roles can be assigned together to one user, or to separate individuals.
Before other cockpit users can make full use of SAP HANA cockpit, the cockpit user administrator needs to use the Cockpit Manager to:

• Create and manage cockpit users

Then, the cockpit resource administrator needs to use the Cockpit Manager to:

• Register resources
• Create resource groups
• Add resources to resource groups
• Grant cockpit users access to resource groups

Important information !!!
SAP HANA cockpit users and database users are two distinct users with their own distinct credentials. A cockpit user can log on to SAP HANA cockpit or Cockpit Manager, but cannot access a resource without supplying valid database user credentials. A database user can monitor and manage a resource (or database) in SAP HANA cockpit, but cannot log onto cockpit or Cockpit Manager using database credentials.
Cockpit users are managed in SAP HANA Cockpit Manager. Database users are managed in each register resource.

Create cockpit users

To manage users, you need the role: Cockpit User Administrator Role. Others available roles:

To add a Cockpit user choose:

Register a database in Cockpit Manager

Before I’ll register a database we should create technical user in each database which we want to connect to cokcpit manager.

The technical user is a dedicated database user that the cockpit uses to collect health data for monitoring the resource (such as information on alerts and system performance).
The technical user must be unique for each resource within the same instance. If you reuse the technical user, then registration fails with a message that the system can’t authenticate the user credentials.

For example:

User: COCKPIT_ADMIN_SID (for remote DB login to manage)
 •    System Privileges:
 BACKUP OPERATOR, DATABASE ADMIN, LOG ADMIN, MONITOR ADMIN, WORKLOAD CAPTURE ADMIN, WORKLOAD REPLAY ADMIN and more. 
 •    Object Privileges:
 SELECT on _SYS_STATISTICS

Now we can register database in Cockpit Manager.

Create database groups

If You have have more than one HANA system, You can think about create database group. This is helpful in monitoring systems and assigning permissions to users. How to do this:

If above configuration is completed we can log to HANA Cockpit. In above I created username: TEST_USER. I remind Cockpit Admin URL: https://hostname:51027

On main page choose in Monitor Landscape tab choose Your database group which You created in configuration, i.e. “DEV Systems”

click on Database SID to see more details :