SAP HANA is an in-memory, column-oriented relational database management system designed for high-performance analytics and transaction processing. It serves as the data foundation for many SAP applications, including SAP S/4HANA, and is available both as a managed cloud service (SAP HANA Cloud) and as an on-premises deployment. Connecting SAP HANA to Databox lets you pull data directly from your database, build datasets using SQL queries, and visualize your business metrics alongside data from your other connected tools.
If you've already established a connection, you can reuse it to add new data sources to your Databox account.
The setup steps differ depending on whether you're using SAP HANA Cloud (managed, hosted by SAP) or a self-managed SAP HANA instance (on-premises or self-hosted in the cloud).
Databox only reads data from your database — it never writes to it. Create a dedicated user with SELECT-only privileges. Connect to your SAP HANA Cloud instance using the SAP HANA Database Explorer or any compatible SQL client, then run:
CREATE USER DATABOX_USER PASSWORD "YourSecurePassword1";
GRANT SELECT ON SCHEMA "YOUR_SCHEMA" TO DATABOX_USER;Replace YOUR_SCHEMA with the schema you want to connect. To grant access to multiple schemas, repeat the GRANT statement for each one.
SAP HANA Cloud restricts inbound connections by IP address. Add the Databox IP to your instance's allowlist:
- Open SAP HANA Cloud Central and select your SAP HANA Cloud instance.
- Click ... (Actions) > Edit.
- Go to the Connections step.
- Under Allowed connections, select Allow specific IP addresses.
- Add 52.4.198.118 to the list.
- Click Save and wait for the instance to finish updating.
- In Databox, go to Data Sources > + New connection.
- Search for SAP HANA and click Connect.
- Fill in the connection form:
- Data source name — a label for this connection in Databox.
- Host — your SAP HANA Cloud instance endpoint (e.g.,
abc123.hanacloud.ondemand.com). Find this in SAP HANA Cloud Central under your instance details. - Port —
443(SAP HANA Cloud uses HTTPS/TLS on port 443 by default). - User — the username created in Step 1 (e.g.,
DATABOX_USER). - Password — the password for that user.
- Database name — the name of your tenant database.
- If your instance uses custom TLS certificates, check Use SSL/TLS with custom certificates and paste in the required certificate content (see SSL/TLS below).
- Click Connect.

Connect to your SAP HANA instance using the SAP HANA Database Explorer, SAP HANA Studio, or any compatible SQL client, then run:
CREATE USER DATABOX_USER PASSWORD "YourSecurePassword1" NO FORCE_FIRST_PASSWORD_CHANGE;
GRANT SELECT ON SCHEMA "YOUR_SCHEMA" TO DATABOX_USER;Replace YOUR_SCHEMA with the schema you want to connect. Repeat the GRANT statement for each additional schema.
Your SAP HANA instance must accept inbound connections from the internet on its SQL port. The SQL port is derived from the instance number: 3[XX]15, where XX is the two-digit instance number (e.g., 30015 for instance 00, 31515 for instance 15).
Configure your firewall or network security rules to allow inbound TCP traffic on that port from 52.4.198.118 (the Databox IP).
- In Databox, go to Data Sources > + New connection.
- Search for SAP HANA and click Connect.
- Fill in the connection form:
- Data source name — a label for this connection in Databox.
- Host — the hostname or IP address of your SAP HANA server.
- Port — the SQL port for your instance (e.g.,
30015for instance number00). - User — the username created in Step 1.
- Password — the password for that user.
- Database name — the tenant database name for MDC systems, or the system SID for single-container systems.
- If TLS is enabled on your instance, check Use SSL/TLS with custom certificates and paste in the required certificate content (see SSL/TLS below).
- Click Connect.
The Use SSL/TLS with custom certificates checkbox encrypts the connection between Databox and your SAP HANA instance using your own certificate material.
When to use it:
- SAP HANA Cloud: TLS is always required. Check this option if your instance is configured with a custom or private CA certificate rather than the standard SAP-issued certificate. If you're using the default SAP HANA Cloud certificate, the connection may succeed without this checkbox.
- Self-managed SAP HANA: Check this option if your instance has TLS enabled and you want Databox to verify the server certificate or authenticate with a client certificate.
When the checkbox is selected, paste the contents of your certificate files into the corresponding fields:
- CA certificate — the root or intermediate CA certificate used to verify the server's identity.
- Client certificate and Client key — required only if your SAP HANA instance enforces mutual TLS (mTLS).
For SAP HANA Cloud, the root CA certificate bundle can be downloaded from the SAP Trust Center.
The SAP HANA integration supports the creation of datasets, which allow you to define and shape the specific data you want to use for reporting in Databox. Datasets make it easier to focus on the most relevant information, enabling you to filter, visualize, and analyze metrics across projects, teams, and clients without writing complex queries each time.
- Select a table: Pick the appropriate schema within that database.
- Select columns: Browse and select the specific columns (fields) from your tables or views to include in your dataset. These columns define the structure and content of your dataset.
For more advanced use cases, you can write a custom SQL query instead of selecting columns manually. This allows you to:
- Join multiple tables
- Apply filters and aggregations
- Format or transform data before importing it into Databox
Your query must return a valid tabular result to be used as a dataset.
- SAP HANA Cloud documentation — Official SAP docs for SAP HANA Cloud, covering provisioning, connectivity, security, and administration.
- SAP HANA Platform documentation — Documentation for on-premises SAP HANA, including installation, administration, SQL reference, and security.
For comprehensive details on metrics, data availability, templates, specifications, usage guidelines, and other key information, refer to the resources listed below.
FAQ
How do I find the SQL port for my SAP HANA instance?
The SQL port is derived from the instance number: 3[XX]15, where XX is the two-digit instance number. For instance 00, the port is 30015. For instance 01, it is 30115. You can confirm the port by checking the nameserver.ini configuration file or by consulting your SAP HANA administrator. For SAP HANA Cloud, always use port 443.
Can I connect to a specific tenant database in a multi-tenant SAP HANA system?
Yes. For SAP HANA Multi-Database Container (MDC) systems, enter the tenant database name in the Database field when configuring the connection in Databox. If you leave this field blank, Databox will attempt to connect to the SYSTEMDB, which is not recommended for reporting workloads.
What should I do if Databox cannot connect to my SAP HANA instance?
Check the following in order:
- Firewall or security rules: Confirm that inbound TCP traffic on your SQL port is allowed from
52.4.198.118. - SAP HANA Cloud allowlist: If using SAP HANA Cloud, verify that
52.4.198.118is listed under Allowed connections in SAP HANA Cloud Central. - Port: Double-check that the port matches your instance number (e.g.,
30015for instance00), or443for SAP HANA Cloud. - User status: Confirm the user is not locked and has the required
SELECTprivilege. RunSELECT USER_NAME, USER_STATUS FROM SYS.USERS WHERE USER_NAME = 'DATABOX_USER';to check.
Does Databox support connecting to the SAP HANA SYSTEMDB?
Databox can connect to the SYSTEMDB, but it is not recommended. The SYSTEMDB is used for administrative tasks and contains system-level data rather than business data. For reporting, connect to your tenant database instead.