Security Access

Hello All-
I have a Essbase application and i have MSAD configured with shared services. Now i want to have users be able to use their MSAD username & passowrd and at the same time i want to assign users the filter access for the indvidual
application. I have always done it in the planning application but i now want implement the same on just Essbase application. Now my question is where should i create my group in EAS or directly in shared service? My guess is that i
should create group in shared service assign as Essbase server access and then refresh the security via AAS and i should see the groups in AAS. Once i see the groups there how can i assign the filter security for the application . IS this
something that i need to do directly in AAS? Please advise!
Thanks!

Hi,
Create the group in shared services, give the group the essbase role of "server access" and access to each essbase application.
Go into EAS, refresh security from shared services for all users.
Create filters in EAS for the essbase applications.
In shared services, expand application groups, essbase, right click the essbase application "assign access control", pick the user/group, assign the filter.
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Providing un-secured access to a web report.

Hello Experts,
We have been sending out 'Load Status' emails on a daily basis for various BW loads. Recently we discontinued this process and set up a report based on one of the statistics cube. We got out the link for this web-report to all the users in our daily load status distribution list.
The problem now is that when you click on the link, it pops out a window asking for the log-on information to our production system. But it looks like a few of the users do not have access to the production system and are hence unable to access this web-report.
Is there any way to allow un-secured access to this particular web-report to all users i.e.without a screen asking for log-on information?Is it possible to set up a generic user id for this report that allows all the users to access this report without actually giving them access to our production system?
Thanks
Arvind

Arvind,
What is your BI system version ?
if it is 3.x - then the URL will have a link to your server followed by a Question mark "?" and then some parameters.
The value till the ? mark is the Web service for the same - you can make this Anonymous in SICF but then this would mean that all queries can be accessed through this URL ...
else create an RFC enabled function module based on RRW3_Query_View_data and then use this for your query and expose the same as a web service and make it anonymous ... or have a BSP page to do the same....

Link does not work for-End-of-Sale and End-of-Life Announcement for the Cisco Secure Access Control System 5.4

Link does not work for
End-of-Sale and End-of-Life Announcement for the Cisco Secure Access Control System 5.4
How do we get Cisco to fix?
see attachment

Give it a couple of days - it looks like they just sent out the notification before the notice was published on the public page.
Once the ACS 5.4 EoS/EoL notice is published you should see it linked from this page.

Creating Historical based Security Access Type

I am trying to create a Security Access Type for PPLJOB that will look at the Reg_Region of an employee and if the historical rows of JOB contain the reg_region, use the employee in a Data Permission for Security. I want to know if anyone has tried this before and how the SQLID for Where needed to be coded. I created a SQLID with the following statement which didn't pull any employees:
PA.EMPLID = JOB.EMPLID AND PA.EMPL_RCD = JOB.EMPL_RCD AND JOB.EFFDT = (SELECT MAX(EFFDT) FROM PS_JOB JOB2 WHERE JOB.EMPLID = JOB2.EMPLID AND JOB.EMPL_RCD = JOB2.EMPL_RCD AND JOB2.EFFDT <= %CurrentDateIn) AND JOB.EFFSEQ = (SELECT MAX(EFFSEQ) FROM PS_JOB JOB3 WHERE JOB.EMPLID = JOB3.EMPLID AND JOB.EMPL_RCD = JOB3.EMPL_RCD AND JOB.EFFDT = JOB3.EFFDT) AND JR.EMPLID = JOB.EMPLID AND JR.EMPL_RCD = JOB.EMPL_RCD AND JR.EFFDT = JOB.EFFDT AND JR.EFFSEQ = JOB.EFFSEQ AND JOB.REG_REGION <> %Bind(SCRTY_KEY1) AND EXISTS (SELECT 'X' FROM PS_JOB JOB4 WHERE JOB.EMPLID = JOB4.EMPLID AND JOB.EMPL_RCD = JOB4.EMPL_RCD AND JOB4.EFFDT < JOB.EFFDT AND JOB4.REG_REGION = %Bind(SCRTY_KEY1))

Thank you for the feedback Carl. Again, I am new to this, so please be patient with me. I am not sure what you mean about adding the parameter to the record selection formula. I have drug the parameter field into the report so that it will prompt for parameters before running, but I do not think that is what you are talking about. Please advise.
To your question about the Submit Date field in the report, when I open up the report and I point at the field for Submit Date the popup shows HPD_Help_Desk.Submit_Date (DateTime). That being the case, I think the answer to your question is that the data type of the data being returned is DateTime. Thanks again for the assistance.

Problem with Cisco Secure Access Server 3.0

Hi All,
Please what is my problem? I use Cisco Secure Access Server Version 3.0 for Windows 2000/NT Servers to authenticate users on our wireless network. I however wish to assign monthly time limits to each user after which he/she will no longer have access until next month or the timer is reset. I tried this with the "User Usage Quota" under User setup. I set the Server to "Limit user to X hours of online time per Month" and enabled the "Use these settings" and also checked the box by the side of the option. I saved and restarted my server. Unfortunetly the settings did not work for all the users whose quotas I set.
What Am I doing wrong. Please assist.
Chafe

Do you have your AP's sending accounting data? If not, ACS has no way of knowing how long they've been online?
You can utilize your ACS logging to see what your accounting looks like to confirm whether you are receiving accounting packets or not?
HTH
Jeff

A simple report to list security access on all folders

Hi there
I want a simple report to list security access on all folders (group wise)
any help ...??
Thanks.
Rakesh.

Hi AnTiiiKa,
For this issue, you can first retrieve all the users on the site, then get all permissions of each user. With this PowerShell Script you could retrieve all Permissions for a Specific User for a SiteCollection
on all Webs and Subwebs, Lists and Items. Here is an article about how to get all Roles and Groups from the User and the URL.
SharePoint SP2010 - Retrieve all User Permissions via PowerShell:
http://sp2010userperm.codeplex.com/
save the report to a csv (excel file):
$web = Get-SPWeb http://address/site/site/site
$user=$web.AllUsers
Get-SPWeb YOURURL | Get-SPUserEffectivePermissions $user | Export-Csv -NoTypeInformation
-Path c:\perms.csv
Please inform me freely if you have any questions.
Thanks

Cisco Secure Access Control Server Solution Engine OR Cisco Secure Access Server ?

Which product is really affected, the Cisco Secure Access Control Server Solution Engine which is a hardware applliance with software from 3.2 to 4.2 or the Cisco Secure Access Control Server Software appliance available for installing as a virtual machine into VMware ESX/ESXi 5.0 with 5.X software ?
Thank you for clarifying
Best regards
Marco

Hi Thomas,
You can download ACS for windows 4.1 or 4.2 from the below listed link:
http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-eval
For ACS 5.x, please visit cisco.com
Download software > Security > Cisco Secure Access Control System 5.x > Secure Access Control System Software
HTH
Regards,
Jatin
Plz rate helpful posts-

Minimum set of ACLs / security access required for getting MBeanHome and Runtime MBeans

Hi,
Where can I get information regarding the "minimum set" of ACLs and security access/permission
required for
a) Accessing weblogic.management.MBeanHome [Local and Admin interfaces] and RemoteMBeanServer
interfaces
b) Use MBeanHome and RemoteMBeanServer interface to look up MBeans [especially
Runtime MBeans] for Cluster, Server instances, EJBs, JDBC, Execute Queues, etc?
Any help or hint is appreciated!
Regards,
DKV

"DKV" <[email protected]> wrote in message
news:3f4e8429$[email protected]..
>
Hi,
Where can I get information regarding the "minimum set" of ACLs andsecurity access/permission
required for
I believe this was answered in the management jmx newsgroup.

'SNMP Security access violation' from Leopard

Hi all,
We're noticing on Leopard (not Tiger) that when a user tries to add a printer and lets the "Default" printer type browse the network, our switches log the following error +"SNMP Security access violation from <IP adress>+".
This is going to be a security problem for us when we implement a new system that uses SNMP.
This didn't occur in Tiger, and even happens if we disable Boujour and SNMP on the Leopard clients.
Can anyone please advise what is happening and how I might be able to stop these SNMP traps being sent when browsing for a printer??
Thanks in advance.

Hi Jon,
This information may be useful to you:
http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627124348873889228353475&threadId=398409
Regards,
Peter.

Cisco Secure Access Control Server for Windows 3.0

I have to rebuild a server using Cisco Secure Access Control Server for Windows 3.0 ... I cannot locate this software under "download software" in cisco.com ..
where can I download a copy for Cisco Secure Access Control Server for Windows 3.0 ?

Hi,
You can not download the ACS windows Solution engines softwares from the cisco.com > download pages as these s/w are not available there. You can only download patches and remote agent software.
In order to get any ACS software/ upgrade assistance you need to open up a TAC case.
Also, ACS 3.0 is not supported by Cisco anymore..getting support for this version or any 3.x is not possible.
HTH
Regards,
JK

WAAS mobile with secure access https (not VPN)

Hi all !!! Hope everyone is well !!!
I have a WAAS environment in place we want to deploying WAAS mobile for teleworkers. My question is, can WAAS mobile works for users that use secure access with https (not vpn connexion)
Thanks in advance !!!

Hi Tarik,
First of all, let me insist on the fact the a WAAS mobile client will not interact with a WAAS appliance on the core side and that you'll need to have a WAAS mobile installed there is you want your teleworkers to get the benefit from WAAS.
That said, let me answer your question: WAAS mobile can indeed accelerate HTTPS traffic.
This is described on page 61 of the following document:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas_mobile/v3.5/configuration/administration/g
uide/CiscoWAASMobileAdminGuide_3_5.pdf
Regards,
Nicolas

Security Access on Period Dimension

Hi,
my system version is 9.3.1. I have a Planning application and i want manage security for the Period dimension.
I was able to define Security access for other standard dimension like Account or Entity but can't understand why it doesn't work with Period.
My Period dimension is quite common (Month-Quarter-TotalYear) and i have implemented Dynamic Time Series on it.
Have you ever implemented Security access on Period Dimension?If yes, how?
Thanks in advance.
Stefano

I assume that setting the start period and end period on the scenario is not adequate for your needs? (this will restrict access to periods for a given scenario as long as you are using web input forms or smart view).
- Jake

Secure access deleted

Hi,I have unknowingly deleted the sandisk secure access file n folder from the pendrive and since then it has stopped woking. it is not being recognized by the computer. can anyone tell me how to restore it?

Try this link:
http://kb.sandisk.com/app/answers/detail/a_id/2399/related/1/kw/secureaccess/r_id/101834

HOW TO secure access to OIDDAS and EMD??

Hi:
I want to secure access to the URL of OIDDAS and EMD to forbid managing the Directory Service and the Enterprise Manager from all places except localhost. Anyone did it?
How can I do it?
Best Regards
Joao Oliveira

This forum seems very very unsupported from the IAS guys :):):):)
So, here is the solution... Adapt it for emd if you want!!
add this to httpd.conf:
<Location /oiddas>
Order Allow,Deny
Deny from all
Allow from localhost
</Location>
Best Regards
Joao Oliveira

How can I revert back to the default config on Secure Access Server 5.3?

We recently purchased new Secure Access Control Servers version 5.1 and have upgraded to version 5.3 with current patches. Several people have configured one of the appliances and we would like to revert back to the original config with no NDGs or Devices or any other variables configured. Is this possible?

While looking up a command in the CLI reference, I also found the command to reset the acs to factory default. It is "acs reset-config". This resets the acs portion only, not the linux appliance, so your IP addresses, DNS, etc. are retained. It does clear out the license for the ACS, so if you use this make sure you have the license file. You will also have to go through the initial password setup again.

SECURITY ACCESS TMADMIN

Hi
TMADMIN_CAT:1300: ERROR: can't become a client - tpinit() failed - TPEPERM - bad permissions
Version Tuxedo 11.1
OS UNIX
This error happens when I execute tmadmin with other user distinct of Tuxedo Adminitrator.
Do you know how remove security access of tmadmin?
if not posible, Do you know how add users?
Thanks
Bye

In the ubbconfig file, add "PERM 0666"; recompile ubbconfig and boot the env.
Looks like in previous versions of tuxedo, default value for PERM was "0666" and now it is "0600". By explicitely specifying it, access permission will be given to all.
James Mathew

Security Access

Similar Messages

Maybe you are looking for