Skip to content

SAP HANA 403 Forbidden When accessing ALM (Application Lifecycle Management)

November 15, 2022

This blog post discusses the causes of the 403 Forbidden error when accessing SAP HANA Application Lifecycle Management (ALM) and provides solutions for resolving the issue.

I am using SYSTEM login, which is no doubt the most “SAP_ALL” figures in SAP HANA Database. Unfortunately, without proper authorization you will see 403 – Forbidden, As shown in below image 2.

The problem starts when i access SAP HANA Application Lifecycle Management like picture below

SAP HANA 403 Forbidden
Image 1

Then I got this response as shown in below image 2

Then I added these roles: –
sap.hana.xs.lm.roles::Administrator
sap.hana.xs.lm.roles::Display

sap.hana.xs.lm.roles::ExecuteTransport
sap.hana.xs.lm.roles::Transport

SQL Syntex: –
call grant_activated_role ('sap.hana.xs.lm.roles::Administrator','SYSTEM')
call grant_activated_role ('sap.hana.xs.lm.roles::Display','SYSTEM')
call grant_activated_role ('sap.hana.xs.lm.roles::ExecuteTransport','SYSTEM')
call grant_activated_role ('sap.hana.xs.lm.roles::Transport','SYSTEM')

Run and execute the above SQL Syntex one by one in SQL console as shown in below image 3.

SAP HANA 403 Forbidden
Image 3

Finally, everything is working. As shown in below image 4

SAP HANA 403 Forbidden
Image 4