Business Rules Access Privileges Strange Issue

Hello,
i know it's weird but it seems that planning has problems with Access Privileges on Business Rules.
This morning i found that some Privileges were missing (groups disappeared from Access Privileges tab on BR). When i try to fix this (adding it again), i have to repeat the operation more than one time to make it works.
What it could be? Sync problem with repository? ...i had no errors on message panel.
I run Hyperion Planning 9.3.1.1.8 on windows environment.
thank u,
daniele

Hi,
I would of recycled the services first to see if it was a communication issue.
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Business rule access privilege

Hi,
Please help me to understand; how to assign user privilege for Business rule.
I mean should i assign users for Planning, essbase and Planning?
Edited by: Kumar 1 on Nov 22, 2010 3:51 AM

In shared services provision user1 with a role for the planning application, if you are on 9.3 (which I think you are) you might also need to provision a hbr role e.g http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/apgs03.html
Then in EAS edit the rule and go to access permissions and provision user1 :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_hbradmin/ch03.html
Cheers
John
http://john-goodwin.blogspot.com/

Unable to provision Business Rules access for users

Hi all,
Our analytic server is properly configured in Shared Services : we can correctly create users, provision Essbase access for those users, change password, etc...
An application business rules is visible in the left pane of shared services, but we are not able to provision Business rules access for users.
When we try to provision access for a user, we have only access to the Analytic properties.
What's going wrong ?

It sounds like the user you login to HSS with hasn't been assigned with "Provisioning Mgr" rights to business rules.
Get the HSS admin user to grant you these rights and you should then be able to provision users to use Business RUles.
Gee

Business Rule access issue

Hi,
I have newly set up few business rules in 9.3.1. I have two issues here.
1. No users listed :In Access Privileges tab,when I click on 'Add' to assign access to a user on this BR, there is only one user i.e admin(Internal) and no other users listed. But in Groups, there are groups listed and I have assigned access to those groups on this BR.
2. Users can not view BRs in planning web : Although I have assigned access to available groups, the users in those groups can not see this business rule in planning web.
Note : Even though I login to planning web as admin, I can not see BRs.
Any help would be greatly appreciated.
Thanks
Ashok

If you have not already it is worth going through the following doc in Oracle Support - "Troubleshooting Hyperion Business Rules Issues [ID 763345.1]"
Cheers
John
http://john-goodwin.blogspot.com/

Updating Business Rule access and security

Hi All,
We have recently load balanced the planning servers, as a part of this currently we have to update "Location" and "Acces Privileges" tabs to reflect "All Locations".
There are hundreds of business rules for us across all servers. I was hoping if there is an automated or maxl way of updating access for business rules rather than manually pulling all the groups in each business rule.
any thoughts on this.
Thank you
Arun

Hi john,
Thanks .It works fine....
I have another question.
I have some calculationscripts along with this business rule.I m not able to find out a option to launch a calculation script from the planning application.
I m logging in as User1(Planner).
do I need to add security for calculation script?
I didn't get any option to add security to calculation scripts in eas?
Plz help
Thanks

Business Rules Access

Hello Experts,
Could anyone please help me with an easy solution to turn-off execution of Business rules in Hyperion Planning? We've closed the Budget scenario which makes the webforms readonly, but users still can run Business rules that are in their tasklists. This is messing up our numbers as the rules wipe out our allocations. So far, the only solution i could think of was to remove the user access on BR. I dont like this option because i've to put the security back in for all the projects again. I would think Oracle obviously has a better and cleaner way of doing this.
Thanks
Sam

Hi Sam,
If I understand, your problem is you dont want the business rule to impact your budget for the current year and version. If any user run the business rule if should not impact any current years budget values.
If my above understanding is correct, then you can create a variable in the business rule either as promt or saved assumption and set that either for next year (as current year is already closed) or set for some other non working version.
This will ensure that your data for current years budget and version is not impacted even if any user run it by mistake through task list.
Thanks
Chirag Tarodkar

Problem with Business Rules access from Shared Services

Hello,
When trying to access Business Rules from Shared Services (expand Business Rules and click on the application) I get the "Refer to the Security Guide to configure security permissions for this application" message, but the user is fully provisioned for Business Rules. It happens even logged on as admin. Access from Administration Services works fine. The version Hyperion system 9 (9.3.0.1). What is wrong? Help, please.
Thanks,
Timur

You can't access Business Rules from Shared Services. This is no different from any other application - Planning, Essbase, etc. You can provision users to the application roles, but you can't actually do anything with the application, other than security, in Shared Services. You use Admin Services to maintain Business Rules.

Business Rules - Access to bucketsets

Hello,
I'm trying to migrate some rules from another rule engine towards OBR, and I'm experiencing a few bumps doing so. Lately I've been trying to get the buckets and their properties from a specific bucketset, but I can't work my way around that. Let me clarify:
I'm actually trying to write a condition where the value is NOT assigned to the object used in the condition. For instance, I have an object "Question" with an attribute "label". I have created a bucketset for this attribute, with several labels, "How", "When", etc. What i want to achieve in my condition, is to determine which labels are currently missing.
To do this, I've been trying to get the bucketset previously defined, match the buckets' properties with the "label" attribute of the questions that are actually here, then return the missing values. But I don't know how to get anything from the bucketset. I've tried playing with Rules SDK, and more precisely the "*ALL_VALUES_LIST*" static field, but it's not documented, so I don't really know what I'm supposed to get with it (by using the functions in JDeveloper to display the result, I get nothing).
I must also mention that another way to do the "missing labels" stuff might be in using the value of the cell as a parameter for the condition, for example "Question.label != $param", but that doesn't seem to work with OBR, so I'm currently giving a shot to any way I can find to do this.
Thanks in advance,
P.-Yves
Edited by: 796522 on 22 sept. 2010 16:57

Hi,
I would of recycled the services first to see if it was a communication issue.
Cheers
John
http://john-goodwin.blogspot.com/

Unable to associate an outline for business rule

Hi All,
I am not able to associate an outline (either essbase or planning) to validate a business rule. The hbrserver.log from epmsystem1/diagnostics/logs/eas
says below output.
2012-03-28 17:57:40,192 WARN [ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadataServerElement - Error connecting to Essbase server http://<servername>:19000/aps/Essbase?clusterName=EssbaseCluster-1.
2012-03-28 17:57:40,193 WARN [ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadata - Error connecting to Essbase server EssbaseCluster-1.
2012-03-29 09:57:13,209 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:7ad025f2:12202d6e25a:-7ffe,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
2012-03-29 09:57:13,211 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
2012-03-29 09:57:13,283 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
2012-03-29 09:57:13,354 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
2012-03-29 09:57:13,419 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:-1c3b8cd:11ffef2e704:-7ffc,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
2012-03-29 09:57:13,420 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
2012-03-29 09:57:13,725 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server ojhyperiondev01.mtn.com.ng.
2012-03-29 09:58:25,363 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:7ad025f2:12202d6e25a:-7ffe,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
2012-03-29 09:58:25,364 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
2012-03-29 09:58:25,449 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
2012-03-29 09:58:25,516 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving user by identity
2012-03-29 09:58:25,579 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Exception occured: EPMCSS-00502: Failed to get group with identity native://DN=cn=f5ef9686a5e205bd:-1c3b8cd:11ffef2e704:-7ffc,ou=Groups,dc=css,dc=hyperion,dc=com?GROUP. Group not found in configured user directories. Check user directory.
2012-03-29 09:58:25,579 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.security.HbrSecurityAPI - Error retrieving group by identity
2012-03-29 09:58:25,694 WARN [ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.planning.PlanningMetadata - Error connecting to Planning server ojhyperiondev01.mtn.com.ng.
2012-03-29 10:00:08,562 WARN [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' com.hyperion.hbr.plugin.essbase.EssbaseMetadataServerElement - Cannot sign on as user already signed on.
com.essbase.api.base.EssException: Cannot sign on as user already signed on.
     at com.essbase.api.session.Essbase.signOn(Unknown Source)
     at com.essbase.api.session.Essbase.signOn_internal(Unknown Source)
     at com.essbase.api.session.Essbase.signOn(Unknown Source)
Can anybody help me please.. I tried with newly created admin user with all the privillages.. still no luck.
Many Thanks

Is this 11.1.2.1 by any chance?
We had this as well, but resolved the issue with this KB:
Error: "Error connecting to Essbase server EssbaseCluster-1" When Trying to Connect Business Rules to Essbase [ID 1328483.1]
     Modified 25-JUL-2011 Type PROBLEM Status PUBLISHED
In this Document
Symptoms
Cause
Solution
References
Applies to:
Hyperion Essbase - Version: 11.1.2.1.000 and later [Release: 11.1 and later ]
Information in this document applies to any platform.
Symptoms
in version 11.1.2.1, after switching Essbase from using host name to a cluster name, in Essbase Administration Services (EAS) it is no longer possible to navigate lower than "EssbaseCluster-1" in the tree of Locations in Business Rules. The following error occurs:
"Error connecting to Essbase server EssbaseCluster-1".
This happens with both pre-existing and new business rules.
Cause
This issue has been identified as unpublished BUG 11783671 - Unable To Select Outline For Essbase Rule If Essbase Cluster1 Is The Server
Solution
The current workaround is:
1. Search for the file named 'essbase.properties' under %EAS_HOME%. Note that normally on a windows setup %EAS_HOME% points to the following path:
":\Oracle\Middleware\EPMSystem11R1\products\Essbase\eas"
If it does not exist, create a blank text file and name it 'essbase.properties' and place it under %EAS_HOME%\server\bin
2. Open it in notepad and add the following setting to the beginning of the file:
aps.resolver.urls=http://<APSSEVERNAME>:APSPORT/aps
e.g aps.resolver.urls=http://server1:13080/aps
NOTE: The line is case sensitive
3. Save the file and restart the EAS server.

Business rule XML facts not visible soa 11.1.1.6.0

Hello experts,
Here comes the description of steps:
When dragging a business rule with input and output facts defined(xsd:complexType), in bpel 2 process, in the edit rule dialog box:
click on either of the assign input & output tabs to add a copy rule,
in the decision fact map dialog box:
the type is business rules facts in the drop down menu.
Here the business rules variables are not shown.
Having read the following older posts:
Empty Business Rule Facts while assigning input/output facts
SOA Jdev app - Bpel Business Rule - Assign Input Facts issue
still, I do not see any solution or workaround offered.
Any helping hand?
TIA!
Edited by: NickAiva on Oct 13, 2012 10:41 AM
Edited by: NickAiva on Oct 15, 2012 3:16 PM

Hi SK,
I think, you have permissions issue. May be you are not able to write to C:\JDeveloper\mywork\MarkViewSerialApprovalApplication\MarkViewSerialApproval\oracle\rules
Regards
Borys

Business Rules Security based on work flow

Hello,
How can we enable security on Business Rules, based on the workflow,
for example,
we have Business rule, that is attached to one input form, which opens a window for entering run time prompts for entering
new asset details, and after entering he saves and the planning unit is promoted to next level,
but on the input form, the Business rule is still visible, where by he can enter the the details though the planning unit is promoted,
Is there any way that makes the Business rule access disables/hides as the planning unit is promoted?
Thanks,
murali.

There is currently no out-of-the-box integration between workflow and business rule security.
This thread may help with some alternatives:
Workflow Problem
- Jake

Can't login to Business Rules

Hi there. I just cant see the business rules EAS Console.
I mean when I click on Business Rules....the error is "Error logging in to Business Rules. The repository has not been configured or you are not authorized to use Business Rules.".
Detailes error:
"Detail:Error authenticating user in UserServerManager.
Detail:Error authenticating user in UserServerManager.
Detail:Error authenticating user in UserServerManager.
Detail:Exception occurred. Please check your log file for details."
It is happening when I externalised users ......before that I can see Business Rules.....
Help would be appreceated.
Thanks and Regards,
Sri-Oracle

Hi,
It usually means the account you are logging into EAS is not provisioned for business rule access.
Cheers
John
http://john-goodwin.blogspot.com/

Access privileges lost in business rules

Hello everyone,
I noticed that my security for business rules have disappeared. Only my native admin account is able to see the groups that have access to BR through the EAS console. When I logon with my account or the main hyperion admin account (MSAD) I don't see the groups. I ran the sync utility and stopped and restarted the services but with no success.
Last Friday I copied over a production planning app into our dev environment and it seems that screwed up the business rules security.
Console version is 9.3.1.3
Does anyone have an idea on what is going on?

I think it will be more of an issue when you migrated the business rules 2 weeks ago, did you check the security after you migrated them, it can get lost on a migration.
Cheers
John
http://john-goodwin.blogspot.com/

How to Migrate Business rules along with access privileges

Hi All,
I migrated business rules from prod to dev using lcm. The business rules got migrated correctly, but the access privileges did not. I tried exporting from EAS and import. Even then the access privileges were not migrated.How do we migrate business rules along with access privileges? Quick help is much appreciated.
We are on hyp. planning 11.1.1.3. and we use classic planning applications.
Thanks
Lakshmi

If they are native users/groups then it may be down to the ID for the users/groups being different across environments, this has always been a problem with business rules, with planning applications then there is the updateusers utility to sync up the ID with shared services.
Cheers
John
http://john-goodwin.blogspot.com/

Performance issues while opening business rule

Hi,
we're working with Hyperion version 9.2.1 and we're having some performance problems while opening business rules. I analyzed the issue and found out that it has something to do with assigning access privileges to the rule.
The authorization plan looks as followed:
User A is assigned to group G1
User B is assigned to group G2
Group G1 ist assigned to Group XYZ
Group G2 ist assigned to Group XYZ
Group XYZ holds the provision "basic user" for the planning application.
Without assigning any access priviliege the business rule opens immediately.
By assigning access privilege to group G1/G2 (validate or launch) the business rule opens immediately.
By assigning access privilege to group XYZ the business rule opens after 2-5 minutes.
Has anyone an idea why this happens and how to solve this?
Kind regards
Uli
Edited by: user13110201 on 12.05.2010 04:31

This has been an issue with Business Rules for quite awhile. Oracle has made steps both forward and backward in later releases than yours; and they've issued patches addressing, if not completely resolving, the problem. Things finally seem to be much better in 11.1.1.3, although YMMV.

Business Rules Access Privileges Strange Issue

Similar Messages

Maybe you are looking for