Cannot Access Busniess Rules via EAS Admin or HBRLauncher for EPM 11.1

An error occurred: Login Failed. Please login again.
Error Message:Error logging in to Business Rules. The repository has not been configured or you are not authorized to use Business Rules.
Complete Detail: Detail:Error authenticating user in UserServerManager. Detail:Error authenticating user in UserServerManager. Detail:Error authenticating user in UserServerManager. Detail:Exception occurred. Please check your log file for details.
I can log into Essbase and create applications and etc. It's in Shared Security Mode with Shared Services.
Dimension Library and Applications Library.
I cannot access Calc Manager Via EPMA interface either, so this is a 2 question thread but Business rules being more critical.
Any ideas?

hi ,
In shared services you have a separate node for business rule wherein you can assign user or group the access to the business rules for ex one of the role is "Interactive User"(If you assign this access it will let user to validate and launch the rule but they cant change the business rule).
Once you have assigned the role to user in shared service you would like to update the user list via EAS for business rules.
Thanks!

Similar Messages

  • Error accessing Business Rules from EAS

    Hi,
    I am using EPM System 11 and trying to access Business Rules via Essbase Adminstration Services Console (EAS). When I open up the Business Rules node from Enterprise View, and select Repository View > Rules, a list of all the Business Rules is displayed. However, when I try to click on one to open it in the editor, I received an error message from EAS the reads:
    Business Rules Error. Error creating DBUserGrpObjLinkTable. Cannot continue.
    When I click Get Detail, it just displays Detail: null. This occurs when trying to open any of the Business Rules. In the past I have had no problem creating, editing, and launching business rules from EAS.
    I am still able to successfully launch the Business Rules I have already created and assigned to my Planning application FROM the Planning Web Application, but I am not able to edit them or create any new ones in EAS. Does anyone know what has happened to cause this error? It appears as if something happen to the one of the tables in the relational database that was configured during the installation of the EPM system? I can provide more detail if necessary. Thank you.

    I have restarted the services and that did not solve the problem. This may be a stupid question, but I'm not exactly sure who I would contact at Oracle about this problem. Can someone tell me where I should look for this?
    Also, I have a bit more information from the logs that may be helpful in solving this. Here is an excerpt from the hbrserver.log:
    2009-12-09 03:28:10,656 WARN main com.hyperion.hbr.core.AccessControlManagerServer - HBR repository is not configured. HBR will not be available.
    2009-12-15 10:25:02,656 FATAL http-10080-Processor4 com.hyperion.hbr.core.AccessControlManagerServer - Error creating DBUserGrpObjLinkTable. Cannot continue.
    It appears that the HBR repository is not configured? I am confused because Business Rules were working fine just last week, and I'm not sure what has changed. Also, I can still successfully run Business Rules from Planning. Any ideas on how to fix the repository? Thanks.

  • Access to Resources via Non-admin accounts

    Is there any way to provide access to resources so that they are accessible via
    non-admin accounts. For e.g. to Retrieve my JMSConnectionfactory i do a
    Environment env = new Environment();
    env.setProviderUrl(url);
    env.setSecurityPrincipal(username);
    env.setSecurityCredentials(password);
    Context ctx = env.getInitialContext();
    The username and password here is the admin account. This works fine but if i
    use a non-admin account(member of Operators group), i get exceptions on Domainloghandler
    runtime
    Problem: I need to register a mbean that needs to access JMS Resources. Since
    our deployment team doesnt want to provide us access to admin accounts, we use
    a "operators" group account to register our mbeans. if i do this, i get a
    Access not Allowed for subject:principals=[operator, Operators], on ResourceType:
    DomainLogHandlerRuntime Action: execute Target: registerToMe.
    This happens when my managed resource tries to access a JMS ConnectionFactory.
    Instead if i register my mbeans using the admin account, everything is fine and
    my managed resource works nice.
    This is on weblogic 81 SP1 on Solaris. Please let me know if you need more details.
    Any clues/hints/solutions greatly appreciated. There is not a lot of documentation
    on how to access/register mbeans using non-admin accounts.
    TIA
    Raj

    I have done some more debugging on this and have narrowed down the issue to the
    location where my initialcontext is being obtained.
    so if i register my mbean as a non-admin account and do an operation on the managed
    resource which fetches initial context, i get the below exception. This is how
    i get my initialcontext
    weblogic.jndi.Environment env = new weblogic.jndi.Environment();
    env.setProviderURL("t3://machine:8102,machine:8103");
    env.setSecurityPrincipal("operator");
    env.setSecurityCredentials("operator");
    Context ctx = env.getInitialContext();
    I am doing this from a mbean thats registered on a different managed server(t3://machine:8101)...
    Whats wrong with this?
    TIA
    Raj
    "Raj" <[email protected]> wrote:
    >
    Is there any way to provide access to resources so that they are accessible
    via
    non-admin accounts. For e.g. to Retrieve my JMSConnectionfactory i do
    a
    Environment env = new Environment();
    env.setProviderUrl(url);
    env.setSecurityPrincipal(username);
    env.setSecurityCredentials(password);
    Context ctx = env.getInitialContext();
    The username and password here is the admin account. This works fine
    but if i
    use a non-admin account(member of Operators group), i get exceptions
    on Domainloghandler
    runtime
    Problem: I need to register a mbean that needs to access JMS Resources.
    Since
    our deployment team doesnt want to provide us access to admin accounts,
    we use
    a "operators" group account to register our mbeans. if i do this, i get
    a
    Access not Allowed for subject:principals=[operator, Operators], on ResourceType:
    DomainLogHandlerRuntime Action: execute Target: registerToMe.
    This happens when my managed resource tries to access a JMS ConnectionFactory.
    Instead if i register my mbeans using the admin account, everything is
    fine and
    my managed resource works nice.
    This is on weblogic 81 SP1 on Solaris. Please let me know if you need
    more details.
    Any clues/hints/solutions greatly appreciated. There is not a lot of
    documentation
    on how to access/register mbeans using non-admin accounts.
    TIA
    Raj

  • I CANNOT ACCESS THE INTERNET VIA MOZILLA FIREFOX. BOX COMES UP AS FOLLOWS:-

    I CANNOT ACCESS THE INTERNET VIA MOZILLA FIREFOX
    A BOX COMES UP WITH THE FOLLOWING:-
    firefox-exe - Entry Point Not Found The procedure Entry Point
    could not be located in the dynamic link library mozsqlite-3-all.
    PLUS
    When I access the internet via my server (Tiscali now Talk-Talk)
    I have to enlarge each page. this is not now automatic.
    What on earth has happened?
    Please Help.
    Thank you.

    You need to do a clean reinstall.
    Download a fresh Firefox copy and save the file to the desktop.
    * Firefox 5.0.x: http://www.mozilla.com/en-US/firefox/all.html
    * Uninstall your current Firefox version.
    * Do not remove personal data when you uninstall the current version.
    Remove the Firefox program folder before installing that newly downloaded copy of the Firefox installer.
    * It is important to delete the Firefox program folder to remove all the files and make sure that there are no problems with files that were leftover after uninstalling.
    Your bookmarks and other profile data are stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder] and won't be affected by a reinstall, but make sure that you do not select to remove personal data if you uninstall Firefox.

  • Suddenly on my iPad I cannot access web links  via emails but can on my iphone

    Suddenly I Cannot access web links via emails on my iPad but can on my iPhone. Is there something in my settings I need to change?

    Restart
    https://www.apple.com/support/iphone/assistant/phone/#section_1

  • I cannot access the internet via wifi on my time capsule.

    I cannot access the internet via wifi on my time capsule even thought it was shown that I am connected to the time capsule with full wifi on my iMac. I use to be able access the internet via wifi on the TC. However, after playing around with the airport utility on my iPad I was no longer able to access the internet via the wifi on myTC. How can I fix this problem?

    Did your TC recently upgrade firmware to 7.6.3?
    I recommend you do a full factory reset.. and redo the setup.
    Use different names.. SMB type.. ie short, no spaces. pure alphanumeric for everything.
    Use only WPA2 Personal security.
    If that doesn't work, give more info.
    Age of the TC.. model number.. A1xxx from the base.
    Firmware revision.
    In the computer are you getting the correct IP and router and dns values? Please post a screen shot.

  • ASA Cannot access https device via Clientless VPN bookmark, site to site works fine

    We've got two offices connected via an IPSEC tunnel.  This site to site VPN works great, we can access our remote devices fine from a PC on either LAN at each office.  The device's address is https://192.168.210.2
    However, if we make a bookmark on the Clientless VPN for that same address the conneciton just times out if it has to go over the site to site VPN. 
    We plugged the exact same web enabled device on the local side of the VPN, put in a bookmark for its https address and it works fine.  Its just remote bookmarks for devices on the other side of the tunnel do not work.
    Looking at the debug log I see the request going out from the source to the destination on port 443 but nothing more.  The NAT exemption etc are all right because people on the LAN have no problem accessing this device remotely with their browser. 
    I haven't been able to adequately describe this problem to find a matching Cisco example, anyone know how to fix this?

    hi luis,
    thank you for your reply. we've checked the smoothwall configuration, but couldn't discover anything which could cause this problem. we even tried replacing the sa520 with a draytek vigor router to set up an lan-to-lan vpn with the smoothwall. with the draytek in place we have no problems accessing the aforementioned servers, so it seems the issue is with the SA520.
    what exactly do you mean by creating an ACL from the remote WAN to our LAN? i assumed you meant creating a firewall rule, allowing traffic from the remote device's public ip to our LAN. however, in that case i need to enter an ip address of a device in our LAN, or else i cannot save this rule. as a test i entered the ip address of my machine as the destination address, but am still unable to access the aforementioned servers.
    here's how i set up the rule:
    from zone: UNSECURE (WAN/optional WAN)
    to zone: LAN
    service: ANY
    action: ALLOW always
    schedule: (not set)
    source hosts: Single address
    from: public ip of one of the aforementioned servers
    source NAT settings > external IP address: WAN interface address (cannot change this setting)
    source NAT settings >WAN interface: dedicated WAN (cannot change this setting)
    destination NAT settings > internal ip address: 192.168.11.123 (ip address of my machine)
    enable port forwarding: unchecked
    translate port number: empty
    external IP address: dedicated WAN

  • I cannot access my music via itunes match

    It has never worked well, accessing music has taken approx 2-3 minutes - slow enough that I have chosen to switch itunes match off.  However, yesterday I ried again (I figured initital problems might be resolved).  The problem is worse - I cannot access any music on my iphone via itunes match. 
    It is truly the worst purchase I have ever made.

    Here's a list of specific error codes & there resolution:
    http://support.apple.com/kb/TS3694
    Try recovery mode again, as outlined in the first article I gave you. Make sure there are no Firewalls turned on or any Anti-Virus software running. If it errors out again, pay attention to any code shown.

  • HT204406 Apple ID couldnt be created bacause of a server error, help!!!!  I cannot access the internet via Ipod

    After having to do a recovery with my Ipod I try to access the internet via the Ipod and the above mentioned Error is what I receive.

    So I found out with alittle research that instead of entering all that info on my ipod, security questions, birthday, ect that it was much easier to just go to http://appleid.apple.com and place all that info there and save it than try the process on my ipod and it finished the update.

  • DS 5.2 - how to give users access to suffixes via the admin console?

    I'm in the process of migrating my LDAP install from 5.1 -> 5.2, and have encountered an issue with console access. The "admin" user previously had access to all the suffixes in the directory. After loading the data into a 5.2 directory, this access was lost. The "admin" user can login to the console, but in the directory tab, only sees "cn=schema" and "cn=monitor". The data suffixes are not present. I have verified that the ACI for this user should be allowing access to the data suffixes.
    Any ideas?
    Additionally, I've tried creating new users with console access, and none of them can even login. Thoughts?

    never mind, found it there.

  • I cannot access my contacts via whatsapp and all of my whatsapp contacts for deleted after I updated my software to iOS 6. Help?

    I updated my software to iOS6 yesterday and now for some reason I have lost all of my whatsapp contacts and my whatsapp cannot access my contacts  can someone please help me ASAP? It is a bit urgent

    try going to SETTINGS > PRIVACY > CONTACTS > WHATSAPP
    if found OFF - Turn it ON
    hope it helps

  • Cannot access Home Sharing or iTunes Wi-Fi Sync for any of my iOS devices.

    Hey,
    I have an iPhone 3GS and an iPad 2, both running iOS5, and the latest version of iTunes for Windows, and had previously had iTunes Wi-Fi Syncing working up until a week ago. Now I cannot even select the 'Sync Now' button on my devices, as they are saying that they cannot access OEM-PC (my computer).
    In addition, I have turned Home Sharing on in iTunes, and entered my Apple ID on both devices for Home Sharing, but I cannot access my iTunes library from either devices.
    I have followed all the steps that Apple's troubleshooting pages have recommended, but to no avail.
    Any help would be greatly appreciated!

    A bit more info for those of you reading this.... the problem seemed to be in iTunes. For each connected device , if I clicked on the Photo option I could no longer select the second radio button for limiting the photos by Events, Albums, etc.  It was an all or nothing deal. But selecting all would cause the error.
    So I had read the other forum posts about the "&" symbol being the cause of the problem.  I went through iPhoto and made all of the changes. It did not work. I then looked at iTunes, using the AlbumData2.xml file listed in the other forums as a reference.  I found one album with the "&". I edited that one.  Still would not work.  So then I spent 3 hours on the phone with AppleCare last week. I talked with 4 different advisors. None of them had heard about the "&" error from the forums. We tried everything in iPhoto including repair and rebuild.  Finally we created a whole new library and reimported my master photos from my original one.  Using this option would allow me to now check off that radio button in iTunes.  BUT... I now lost all of my albums and events and would need to rebuid them.  I was not happy. They agreed and we set up time to talk this week.
    So today I talked with AppleCare again. They now have more info and said the problem has to do with iTunes and the new iPhoto 9.4. It does not like the "&" symbol anywhere in either iPhoto or iTunes. So they now have me going through everything in my iTunes library. Genre is OK but any other item cannot have " & ". I have several dozen to edit and will do it over the weekend and then restore my original iPhoto Library and see if I can finally get it all to sync. I will let you know how I make out, but apparently you need to eliminate " & " from every entry in iTunes and iPhoto.
    Quality control is not up to par with Apple these days. 

  • Bought a MacBook Pro for granddaughter for college and she cannot access the app store to purchase apps needed for class. Always gets security questions that she did not set up and therefore she is denied access. But it does show her redeemable balance.

    I bought a 13" MacBook Pro for our college bound granddaughter. She cannot access the app store as she
    gets security questions to answer that she never set up, and of course it won't let her purchase anything. She has
    a redeemable balance, but can't get past the security questions and can't seem to find another way to circumvent this.
    What can she do?

    If she has trouble with the first advisor, she can always ask to speak to a senior advisor. However, AppleCare isn't really needed in cases like this, as the iTunes Store is quite familiar with accounts of this nature, and it's more of their speciality. Your daughter may want to contact them next time, but it's only email support at the moment (soon to change).
    iTunes Store Support
    http://www.apple.com/emea/support/itunes/contact.html

  • How to access calendar rules via java

    Hi to all,
    We have a process in which we need to set a Timer, but the date must be validated against Calendar Rules. We searched in forums, webs, documentation and we couldn't find a way to do this.
    I know it is possible to set an expiration date based on Business Calendar on a Human Task (deadline tab in Human task editor), but this is not what we need.
    We actually need a way to set a variable date in the process that can handle only business days. e.g.: 'now' + 2 business days.
    Right now we are setting the Timers with this expression from a Business Rule: Duration.from string("PT48H")
    Then I associate the business rule output with a Time type variable(deadlineTime) doing: 'now' + deadlineTime
    So right after that I can use the Time variable on a timer attached to the human tasks I need. * We need to use business rules because the customer may want to change the times accordingly to their needs through BPM Composer. *
    The problem is that this solution does not take into account Saturday and Sundays (holidays are a concern too).
    We need to set the expiration time to timers attached to human tasks, but the time should consider working days only. We consulted with experts from Oracle and told us that functionality is available in the PS 6 version. At the moment it is impossible to migrate to that version. I need to know how to access via Java APIs to the calendar rules for checking programmatically.
    JDeveloper version: 11.1.1.6
    Any suggestion?
    Thanks in advance
    Marcelo

    Hi Yarner,
    Once you have all your dll included in a jar and used the nativelib tag, you have to use, at the beginning of you application, the command System.loadLibrary to load all the dll you need. Including the ones called by the others you have direct access.
    The dll�s have to be explicitly loaded in the order they are called.
    For example: you use lib1.dll and lib2.dll. The lib1.dll needs lib0.dll.
    Even if you don't use lib0.dll directly, once its called by lib1.dll you have to put then in the order.
    System.loadLibrary("lib0.dll");
    System.loadLibrary("lib1.dll");
    System.loadLibrary("lib2.dll");
    I hope it may help you, good luck.
    Mario

  • Cannot access Cisco MIBs via SNMPGET

    Hello, I'm sure this is a simple fix and I'm too stupid to figure it out, but I'm having trouble accessing Cisco ACE specific OIDs via Net-SNMPs tools. If I run snmpwalk on the device, I get a nice list of standard SNMP OIDs such as SNMPv2-MIB, IF-MIB, IP-MIB, etc with values such as the device name, interface IP counters and all that stuff. But I don't see any Cisco specific OIDs in the list. I really want to be able to monitor the load across real servers and server farms and such on this ACE module.
    So, for example, I try running the following command and it says no such object:
    snmpget -m +CISCO-SLB-MIB -On -v 2c -c communityname ipaddress CISCO-SLB-MIB::slbServerFarms
    .1.3.6.1.4.1.9.9.161.1.2 = No Such Object available on this agent at this OID
    I read you should try adding an index to the OID as there may be multiple sub objects (and of course there are multiple server farms) but I get the same thing:
    snmpget -m +CISCO-SLB-MIB -On -v 2c -c communityname ipaddress CISCO-SLB-MIB::slbServerFarms.0
    .1.3.6.1.4.1.9.9.161.1.2.0 = No Such Object available on this agent at this OID
    Just to confirm a valid OID, I get this:
    snmpget -m +CISCO-SLB-MIB -On -v 2c -c communityname ipaddress SNMPv2-MIB::sysDescr.0
    .1.3.6.1.2.1.1.1.0 = STRING: Application Control Engine Service Module
    I also tried snmptable with CISCO-ENHANCED-SLB-MIB::cesServerFarmRserverTable and it just says "Was that a table?"
    So I think it must be a permission problem or some config that I have to tweak. Right now the only SNMP config is:
    snmp-server community communityname group Network-Monitor
    My device version info is:
    Software
      loader:    Version 12.2[120]
      system:    Version A2(1.4) [build 3.0(0)A2(1.4) adbuild_11:54:12-2009/03/05_/auto/adbu-rel2/rel_a2_1_4_throttle/REL_3_0_0_A2_1_4]
      system image file: [LCP] disk0:c6ace-t1k9-mz.A2_1_4.bin
      installed license: ACE-SEC-LIC-K9 ACE-SSL-05K-K9
    Thank you for your help!

    This is an interesting thread, and probably something which is unclear to a lot of people.  Tables and their entries (think header rows) are inaccessible because they do not contain data directly.  Data is only contained in the cells within the table.  The cells in this case are the SNMP objects defined within each table entry (or row).  So, a table is inaccessible as a whole, but each of its data cells can be accessed.
    If you think of it like a spreadsheet, it may be a little more useful.  But let's try a visual.
    cesServerFarmRserverTable
    cesServerFarmRserverPort
    cesServerFarmRserverAdminWeight
    cesServerFarmRserverOperWeight
    80
    100
    100
    8080
    50
    10
    The header row in this table is called cesServerFarmRserverEntry.  It contains the column names for our data.  Each row has a unique number associated with it.  That is the cseServerFarmRserverPort.  In a typical spreadsheet program, this would be the column at the far left which you cannot edit.  It just enumerates the rows.  In this example, that column is named cesServerFarmRserverPort.  If I wanted to tell someone how to get the value of cesServerFarmRserverAdminWeight at a particular row, I would say, "go to row 80, and read the value from the cesServerFarmRserverAdminWeight column.  In this case, they would read 100.
    SNMP operates in the same fashion.  For one to get a specific value (i.e. perform an SNMP GET), one must know the specific column name and row number.  In the actual case of the cesServerFarmRserverTable, the row number is actually a combination of the slbEntity, slbServerFarmName, cesRserverName, and cesServerFarmRserverPort, but the concept is the same.  You can only do an SNMP GET on a precise address in a given table (i.e. on a cell).  To do a GET on cesServerFarmRserverTable directly would make no sense since an atomic value could not be returned.
    An SNMP Walk, on the other hand, allows you to start with the table itself, then walk through each cell in the table, printing out the value at that cell.
    A tool like snmptable essentially performs recursive GET-NEXT queries to walk through all of the rows, then print the value of each cell in a tabular format.

Maybe you are looking for