Connect SAP HANA
Prerequisites
- You have permission to create SAP HANA users and roles, or an existing read-only user for Skoot.
- You know which schemas to expose to Skoot.
- You have SAP HANA connection details (
Host,Port,Username, andPassword). - For SAP HANA Platform, you also know the optional tenant database name.
Step 1 — Create a Read-Only Role and User
Run the following as a user with permission to create roles, grant schema privileges, and create users. Replace the schema names and password before running it.
CREATE ROLE "SKOOT_READONLY";
GRANT SELECT ON SCHEMA "ecommerce" TO "SKOOT_READONLY";
GRANT SELECT ON SCHEMA "another_schema" TO "SKOOT_READONLY";
CREATE USER SKOOT_READER
PASSWORD "<strong-password>"
NO FORCE_FIRST_PASSWORD_CHANGE;
GRANT SKOOT_READONLY TO SKOOT_READER;Add one GRANT SELECT ON SCHEMA statement for each schema Skoot should access. Schema-level SELECT applies to the objects in that schema, including objects created later.
Use a dedicated technical user for Skoot instead of DBADMIN or another administrator account.
Step 2 — Configure Network Access
SAP HANA Cloud connections normally use encrypted port 443. For SAP HANA Platform or private network deployments, use the SQL port configured for the target tenant database.
If your instance restricts inbound connections, allowlist the Skoot public egress IP shown in Data Sources .
Connect in Skoot App
After SAP HANA setup is complete:
- Open SAP HANA Connection .
- Fill these fields:
Connection NameHostPort(443for SAP HANA Cloud)Database Name (Platform only)when connecting to SAP HANA PlatformUsernamePasswordQuery Timeout (ms)(minimum1000)Use SSLValidate SSL certificate
- Keep SSL and certificate validation enabled for SAP HANA Cloud.
- Save the connection and confirm its status is
Connected.
Skoot discovers every non-system schema visible to the configured user. Restrict schema access with HANA roles and grants rather than an administrator account.