Creation of Group in Shared Services

Hi All,
I am creating groups in Shared Services using Import export utility, to create a group I have given record like
#group,,,,,,,
id,provider,name,description,internal_id,,,
Test.30.7202,Native Directory,Test.30.7202,,,,,
But group is not getting created, when I checked the trace log file I found
Trace...
     2010-06-09 15:28:20,822 Attempting a import operation
     2010-06-09 15:28:22,147 Import : Attempting to create group Test.30.7202
     2010-06-09 15:28:22,162 Import : Create group Test.30.7202 failed.
Can you please someone explain, is there I missed any information?
We are using Hyperion system 9.3.1
Thanks in Advance

Hi John,
Thanks for the prompt response, its working fine without intenal id. One more issue, Now I am provisioning groups for Planning Application
project_name application_name role_id product_type user_id user_provider group_id group_provider
HyperionPlanning Testapp Planner HP-9.3.1 Test.30.7202 Native Directory
Like the above, is there any syntax to provide access to Essbase "Server Access" (Minimum access to access to Essbase) and Business Rules?
Thanks in Advance,

Similar Messages

Security Settings for two admin groups with shared service

Hi all,
I use Essbase Administration Services 11.1.2 and Hyperion Shared Services Console 11.1.2.0.73 (Drop 17)
Access Rights are granted via Groups in Hyperion Shared Service Console.
We have two admin groups.
AccessGroup 1: admin rights on some cubes (A) and read rights on all others (B).
AccessGroup 2: admin rights on (B) and read rights on (A).
If someone of AccessGroup 1 copies a cube of (A) – Fin_rep for example – wether AccessGroup 1 nor AccessGroup 2 can even see the cube (and i dont even mention admin rights) execpt the one who copied it.
Settings in Shared Services Console:
- Both groups have role "Create/delete application" and "AccessManager" (or something like that - german word is "Zugriffsberechtigungsmanager") on Essbase Cluster (our essbase server).
- AccessGroup 1 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (A)
and role "Read" for all cubes with read only (B)
- AccessGroup 2 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (B)
and role "Read" for all cubes with read only (A)
I hope i can get some help with this topic.
Thank you in advance,
Best regards
Bernd
Edited by: 907705 on 07.02.2012 02:52

Security will not copy over when you create new cube from old cube. You have to grant security to required groups using shared services or Maxl.

Import Groups in shared services

Hi All, I used to import groups into planning application using thefollowing code in planning version 3.5. IMPORT_GROUP,Group Name <MEMBERS> membername1,2,1 membername2,2,1 membername3,2,1 </MEMBERS> how can I import groups in shared services. thanks in advance.

There are docs in Hyperion\common\utilities\CSSImportExportUtility\importexport\doc that explains how to do this

Not able provision a new native group in shared services

Hi,
I am trying to add a new native group in shared services and trying to provision the group. But I am getting the following error:
90:7019:Failed to process the request
Is there any solution for it. Can anyone suggest me how to proceed further.
Thanks,
Hima

Can determine if the provisioning is failing for a particular application? Try to pick something confined to shared services like "application creator" in shared services and see if you can provision just that role. This will tell you if it is an issue with metadata from a product outside of shared services.
Do you have any applications with the same name or registered more than once in your application groups in shared services?
If it fails for everything you try have you restarted shared services and checked your jvm heap settings?
Also, in the logs Shared Services directory there are many log files , can you check them for any related error messages?
Thanks
Nick

How to extract external directory users from a shared services group from shared services RDBMS repository

Hi,
I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
Thanks...

You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
select b.Name ,a.Name from HYPFOUND.CSS_GROUPS b ,
HYPFOUND.CSS_USERS a ,
HYPFOUND.CSS_GROUP_MEMBERS c
WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
c.GROUP_IDENTITY = b.IDENTITY_ID
GROUP BY (b.Name,a.name)

Generate report to show all users and groups in Shared Services in EPM 11x

Hi,
Is there any way to generate a report (like a migration report or job status report) which can be generated through workspace/shared services 11.1.1.3 so that my admin can look at all the users and groups created. Something that I can view and probably print out? Any suggestions?
~Adeeba

Yes, I knew this one. This basically shows me the users and groups assigned specific provision access. Is there any way to view a report that shows which users and groups have access to dimensions of an individual planning application?
~Adeeba

New group in Shared Services does not come up in projects?

Hi All,
I'm working on a system that has externalized security, and we use Hyperion Shared Services to add users to groups and assign filters to groups.
I have just added a new group in the analkytic server in shared services, I have also provisioned it to have filter access of a particular DB.
When I go to the projects folder and check the list of groups under the application, to look for this group so I could assign the filter, I dont find the group listed.
Does anyone know what I am missing out on.
Thanks in advance.
Anindyo

Hi John,
I tried to delete the group and create a new group again:
searched for the group, right clicked on it and clicked on Provision.
Then I expanded the Analytic server tree to the left, selected server Access, and moved it using the arrow button.
Then I expanded the DB name, there were "Provisioning Manager", "Application Manager" and "My Role".
I expanded the Tree of "My Role" and found "Calc", "Filter" and "Read".
I expanded the tree "Filter", and found Start/Stop Application.
I selected "Filter" (not Start/Stop Application) and moved it to the second list on the right using the Arrow button.
Then I clicked on the save button.
Now I expanded the Projects Folder:
Clicked on the DB to which I provisioned this group.
It showed the list of users and groups to the right.
I selected groups in the drop down.
Clicked on refresh, but the new group does not appear.
Please let me know if I missed out on anything.
Thanks for the response,
Regard,
Anindyo

Creating Groups on Shared Services. Any naming limitations?

Hi,
Is there a limitation on the length of the Group Names that are created in the Native Directory of Shared Services? Only limitation I know is 80 characters, but I think it applies to Essbase outline dimension members only. Can anybody confirm?
Thanks,
A

It's longer than 80. This name worked:
Now is the time for all good men to come to the aid of their party. The quick red fox jumped over the lazy brown dog. asdfjkl;
That's 129 characters. I got one up to 242 characters and saved it, but when I tried to modfiy it I got an error message saying the length was too long.
The documentation probably states the maximum length.
However, once the length of the group name gets past 40 or so it becomes difficult to read in the Shared Services console. How long does it need to be?
Regards,
Cameron Lackpour

Projects not showed up under Application Groups in Shared Services

Hi,
We had a problem and reconfigured everything in 11.1.1.3, after that everything went on smooth but when i open share services and click on Application Groups nothing shows up except File System.
Please help me in resolving this issue.
Thanks,
SB

Can some one help me in this regard.

Purchase order creation by Purchasers in Shared service

Dear all,
We have a scenario, where purchasers can create PO for all company codes.
But it is known that in SRM 7.0, Purchase order field is not a part of standard SRM delivered.
SAP has provided a note 1079525. But however they have mentioned that they dont support the note corrections.
Pls let us know would there be any side effects on using the same note.
On quering SAP, they had said that it is not a part of standard SRM and will not support.
Alternate Solution
Since we have relation plant = company code, we are planning to map the company code automatically in the background
so that all validations will happen for the company code.
Pls let me know the BADI, which could help to have this mapping, Doc change badi doesnt help here.
Regards
harish

Hi Harish,
Suggest you to try the changes as per the note suggested by SAP.
I do not think your problem can be resolved by a BADI.
Best regards,
Ramki

Essbase - Shared Services - Maxl - User creation

Hi,
I have an issue looking similar to [Automating User/Group creation & Assigning filters in Shared Services|http://forums.oracle.com/forums/thread.jspa?threadID=1009127]
When trying to add internal groups to an external MSAD user, I get following messages:
h3. when adding a group to an external user:
h6. alter user 'x29027' add 'GR_GROUP';
Maxl returns:
h6. Statement executed with warnings.
h6. User x29027 does not exist
=> the system does not recognize the user
h3. when trying to create this user first as an internal user
(based the settings from on another external user)
h6. create or replace user 'x29027' identified by 'password' as 'i09740';
Maxl returns:
h6. Statement executed with warnings.
h6. A user/group with the same name (x29027) exist at Shared Services
=> the system does recognize the user in MSAD!
===> both statements seem to be contradictory!!!
h3. Other remarks/thoughts:
- we have two MSAD links (to two different domains), does this matter?
- no difference when addressing users as x29027@MSAD_FIB (a syntax similar to the HSS security report output)
- any possibilities in creating a user internally first (using the 'as' option; to copy settings from another user) and then moving to external? (like alter user 'Test_EDR4' set type external;)
Thanks in advance
Erik
Environment: Essbase 9.3.1.3. with Shared Services

Hi Erik,
When you create an user in Essbase, the user will be created both in Essbase as well as Shared Service,
where as when you create an user in Shared service, the user will not be created in essbase untill you perform refresh.
In your case you can create the external user in Essasbe by using "Create user 'x29027' type external;'.
By this you will be creating the user in Essbase and the particular user is recognised in Essbase.
Now you can add him to any group.
- Krish

Shared Services Application Groups

Hi,
We have the following application groups which I assume are default
APS Servers
Business Rules
Default Application Group
Essbase Studio Server
Essbase Server
File System
Foundation
Planning
Reporting and Analysis
I was playing with creating my own Application Groups in shared services and created my own one and then decided that I didn't have a use for it so I deleted it but it also deleted what I has added to it from the groups above. e.g
Essbase Server Access
Our Main Planning application
Now I go back and try and provision for these I cannot find them anywhere!! How can I get them back??
Cheers
Luke

John,
Reconfigured the deploy to web server and cluster configuration for Planning, both successful yet if I go into Workspace the Navigate/Application does not appear. Forget if I see Planning or Scorecard I cannot even see the subbox 'application'
JTS

Shared Services Mixed Native-MSAD group nesting

Is anyone doing this?
I am trying to make an MSAD group a member of a native group using shared services and after adding the MSAD group, the console errors out for the group i just made whenever trying to view the group members. This is repeatable and happens before i have even provisioned the parent group when i am trying to view the group members.
When i nest a native group inside another native group, it works fine.
In the SharedServices_Security.log found in Oracle/Middleware/user_projects/domains/EPMSystem/servers/FoundationServices0/logs
I see the following stack trace:
[2010-12-14T09:09:22.156-06:00] [FoundationServices0] [ERROR] [EPMCSS-7019] [oracle.EPMCSS.CSS] [tid: 7] [userId: <anonymous>] [ecid: 0000In_RR_eDKeoLwUg8yW1D1Yoh00001G,0] [APP: SHARE
DSERVICES#11.1.2.0] [SRC_METHOD: execute:129] [SRC_CLASS: com.hyperion.css.web.action.CSSStatefulAction] Failed to process the request.
[2010-12-14T09:16:16.365-06:00] [FoundationServices0] [NOTIFICATION] [EPMCSS-17306] [oracle.EPMCSS.CSS] [tid: 7] [userId: <anonymous>] [ecid: 0000In_T0hhDKeoLwUg8yW1D1Yoh00001J,0] [AP
P: SHAREDSERVICES#11.1.2.0] [SRC_METHOD: ] [SRC_CLASS: ] [arg: native://nvid=af1814bfd20d7272:58ecdd0:12ce020823f:-7f66?GROUP] x
[2010-12-14T09:16:17.473-06:00] [FoundationServices0] [ERROR] [EPMCSS-37000] [oracle.EPMCSS.CSS] [tid: 8] [userId: <anonymous>] [ecid: 0000In_T0z1DKeoLwUg8yW1D1Yoh00001K,0] [APP: SHAR
EDSERVICES#11.1.2.0] [SRC_METHOD: execute:128] [SRC_CLASS: com.hyperion.css.web.action.CSSStatefulAction] Error while processing the request.[[
java.lang.NullPointerException
at com.hyperion.css.web.util.DTOFactory.createGroupDTO(DTOFactory.java:49)
at com.hyperion.css.web.util.DTOFactory.createGroupDTOEscDoubleQuote(DTOFactory.java:75)
at com.hyperion.css.web.action.EditGroupAssignGroupsFormAction.executeAction(EditGroupAssignGroupsFormAction.java:109)
at com.hyperion.css.web.action.CSSStatefulAction.execute(CSSStatefulAction.java:119)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:421)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:226)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3594)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2202)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2108)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1432)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
I think its a bug and have opened an SR with oracle, but i'm curious what others out there are doing.
Edited by: Javanator on Dec 14, 2010 10:25 AM

Hi Dear
Is this issue resolved? i too get the similar error in the log file . Please let me know if it is reolsved for you

Shared Services Group Provisioning

Hi,
I am using Hyperion Shared Services 9.3.1. I am running a script to provision users under one group.
I am running it through importexport utility.
. I have tested the script with 2 users and it has provisioned those. that means script is correct. My problem is this time, I am running the script to provision 200+ users in one group
Is there a way I can check through logs how much its finished or how many users it has provisioned. I am going under that group in Shared services, over there its not showing those users.
Please help me.
Thanks in advance.
Pankaj Mehta.

Hi,
In the property file you can enable tracing by specifing trace log file in ExportImport properties file. enable the following properties:
importexport.enable.console.traces=true( Indicates whether trace information should be displayed in the console where the Import/Export utility is executed)
importexport.trace.events.file=<LogFileLocation>( TraceLogFile)
importexport.errors.log.file=<LogFileLocation>( errors during the operation is logged to this file)
Hope this helps!
Nra

Shared Services Users Disappear from Groups

We have Native Groups in Shared Services that we added users from our MSAD directory to. Yesterday we found that the groups no longer have these users in them and IT did say they did some moves in the directory over the weekend. But I'm wondering if that would really cause SS to drop all the users from the groups like this.
Basically, no one is able to log in although we are testing adding users back to the groups and think that's working.
I just don't want to have to re-create our groups anytime our MSAD is updated.
I'd appreciate any help in understanding this better,
Paul

Our MSAD administrators moved some OU's around one day and it caused a lot of problems for us since our Shared Services MSAD configuration setting for "User DN" had all the OU's hard coded or what have you. I had to change them to the same that the AD folks had changed them to, then restart everything.
So on the native side I can see how if they moved OU's around that could throw off what you had done. There's a utility which I've been too scared to use (probably harmless but I can't afford any mishaps) which tells Shared Services to search for MSAD changes and to force them through Shared Services, which is probably a nice thing to do once in a while especially when MSAD OU's are moved around. SS does not automatically poll for that type of change but you should be able to automate this.
There's an updatenativedir utility that you can read up on which might help. Don't forget to do backups first of all the security-related databases & files, etc. first.
Perhaps someone reading this is comfortable running UPDATENATIVEDIR and can help provide better guidance, if that's the issue here.
Karen

Creation of Group in Shared Services

Similar Messages

Maybe you are looking for