SAPHANA preregistration script

Author: David Curwin

articles/backup/tutorial-backup-sap-hana-db.md

@@ -91,7 +91,23 @@ Running the pre-registration script performs the following functions:
 
 * It installs or updates any necessary packages required by the Azure Backup agent on your distribution.
 * It performs outbound network connectivity checks with Azure Backup servers and dependent services like Azure Active Directory and Azure Storage.
-* It logs into your HANA system using the user key listed as part of the [prerequisites](#prerequisites). This key is used to create a backup user (AZUREWLBACKUPHANAUSER) in the HANA system and can be deleted after the pre-registration script runs successfully. This backup user (AZUREWLBACKUPHANAUSER) will allow the backup agent to discover, backup and restore databases in your HANA system.
+* It logs into your HANA system using the user key listed as part of the [prerequisites](#prerequisites). The user key is used to create a backup user (AZUREWLBACKUPHANAUSER) in the HANA system and the user key can be deleted after the pre-registration script runs successfully.
+* AZUREWLBACKUPHANAUSER is assigned these required roles and permissions:
+  * DATABASE ADMIN: to create new databases during restore.
+  * CATALOG READ: to read the backup catalog.
+  * SAP_INTERNAL_HANA_SUPPORT: to access a few private tables.
+* The script adds a key to **hdbuserstore** for AZUREWLBACKUPHANAUSER for the HANA plug-in to handle all operations (database queries, restore operations, configuring and running backup).
+
+To confirm the key creation, run the HDBSQL command on the HANA machine with SIDADM credentials:
+
+```hdbsql
+hdbuserstore list
+```
+
+The command output should display the {SID}{DBNAME} key, with the user shown as AZUREWLBACKUPHANAUSER.
+
+>[!NOTE]
+> Make sure you have a unique set of SSFS files under `/usr/sap/{SID}/home/.hdb/`. There should be only one folder in this path.
 
 ## Create a Recovery Service vault