> Software > Protect > AI & Analytics > SAP IQ (Sybase IQ) > Get started with backups

Configure SAP IQ (Sybase IQ) user and permissions

To connect your SAP IQ database to Commvault, you must configure a database credential with the required permissions and provide the authentication details Commvault needs to connect.

Create or identify an SAP IQ database user

Create a dedicated SAP IQ database user for Commvault backup and restore operations, or identify an existing user with the required permissions. The user must have the BACKUP privilege and sufficient permissions to query system tables.

The DBA role satisfies all required permissions. For a dedicated backup user, you can grant the BACKUP privilege explicitly:

GRANT BACKUP TO backup_user;

Assign the required permissions

The SAP IQ database user requires the following permissions:

Operation Required role/scope What it grants
Backup BACKUP privilege Execute BACKUP DATABASE and BACKUP DATABASE INCREMENTAL commands
Metadata queries Read access to system views Query sp_iqfile(), sp_iqbackupsizeEstimate(), and database configuration
Restore BACKUP privilege Execute RESTORE DATABASE command via utility server
Server control OS-level read access to $IQDIR16/bin64 Run dbstop, start_iq, and dbisqlc utilities for server stop/start operations during restore
File management OS-level write access to IQ data directories Delete existing database files during restore operations

Provide connection details

You must provide the following connection details when configuring SAP IQ protection:

  • ODBC connection string prefix: DSN name or connection string prefix (for example, DSN=iqdemo). If the DSN does not exist, Commvault creates it automatically from the host, port, and database custom properties.

  • Database username: SAP IQ database user with BACKUP privilege (for example, DBA or a dedicated backup user).

  • Database password: Password for the SAP IQ database user.

  • SAP IQ installation directory: Path to the IQ installation directory (for example, /opt/sapIQ/IQ-16_1). This is specified in the iqDir custom property.

  • Engine name: SAP IQ server engine name (for example, iqdemo). This is specified in the engineName custom property.

  • Host and port: SAP IQ server hostname or IP address and port number (for example, 172.16.196.211 and 2638). These are specified in the host and port custom properties.

  • Database name: SAP IQ database name to protect (for example, iqdemo or sales). This is specified in the database custom property.

  • Utility server password: Password for the SAP IQ utility server's -su (super user) password, required for restore operations. This is specified in the utilSuPassword custom property.

Notes and considerations

  • Use a dedicated service account for SAP IQ backups rather than a personal user account to ensure credential continuity and clear audit trails.

  • The database user credential does not expire as long as the SAP IQ user account remains active. If you change the user password in SAP IQ, update the credential in Commvault to avoid backup failures.

  • OS-level permissions (read access to $IQDIR16/bin64 and write access to IQ data directories) are required for the operating system user running the Commvault workload process, not for the SAP IQ database user.

  • The utility server password (utilSuPassword) is used only during restore operations to start a temporary utility server on port 19638.

Validate permissions

After configuring the credential and connection details, run a test backup to verify that permissions are correct:

  1. Configure a SAP IQ backup job with the credential and connection details.

  2. Run a full backup job.

  3. If the backup fails, check for the following common causes:

  4. "Access denied" or "BACKUP privilege required": The database user does not have the BACKUP privilege. Grant the privilege using GRANT BACKUP TO <username>;

  5. "Cannot connect to database": The ODBC connection string, host, port, or database name is incorrect. Verify the connection details and ensure the SAP IQ server is running.

  6. "SAP IQ server process not found": The SAP IQ server (iqsrv16) is not running on the specified host. Start the server and retry the backup.

  7. "Cannot access $IQDIR16/bin64": The OS user running the Commvault workload does not have read access to the SAP IQ installation directory. Grant read permissions to the directory.

  8. "S3 storage not reachable": The MediaAgent cannot reach the S3-compatible storage endpoint. Verify network connectivity and firewall rules between the MediaAgent and the storage bucket.

×

Loading...