Does Essbase 7.1.6.3 and up REALLY require Shared Services?

Greetings.
I'm researching the requirements to upgrade from 7.1.3.1 and notice that there are steps to install Shared Services. I see that the instructions mention that if you are using "Native authentication" and not "External authentication" you need Shared Services.
So, I'm kind of in a bind.
My company implemented a custom external authentication solution based on the Hyperion Common Security Services (CSS) Java framework. I was wondering if anyone else moved up to these versions and did NOT install Shared Services for external authentication (instead, using the essbase.cfg to point to the CSS configuration file).
Why do I have a custom solution? Can you say corporate RED TAPE???
Thanks, all, in advance.

In System 9, you can continue to not authenticate Essbase from Shared Services if required. IOW, Essbase still handles the authentication which is what I think you want to do.
I don't know if Essbase 7.1.6.whatever works the same way although I suspect so.
This means that you lose the benefits of Shared Services (central place to provision security across multiple products) but you should be able to do it. I guess if you are an Essbase-only shop, this isn't really much of a loss as there's only one product to manage. In a multiple Hyperion products the multiple administration points may be an issue.
Regards,
Cameron Lackpour

Similar Messages

  • Provider Services and Studio Errors in Shared Services

    I installed and configured Shared Services version 11.1.1.3 on Windows 2003. After installing and configuring APS and Studio, I get an error in Shared Services when I click on the application. The error says "User is not authorized for the action" I am logged in as the admin and there are no other users. The system was JUST installed.
    I have repeated this error on multiple systems using separate sets of install files.
    The applications are running and fully functional.
    Does anyone know if this is a cosmetic error or if this a functional error?
    I've also noticed that there is no provisioning available in Shared Services for APS.
    I can provide a screen shot. Ididn't see a place to include it here.
    Edited by: user8344436 on Nov 16, 2009 8:18 AM

    http://download.oracle.com/docs/cd/E12825_01/epm.111/esb_dbag/limits.htm
    as per Dbag:
    serached for
    Number of users and groups (combined): 30,000 Exceeding this limit results in an error
    in the above link.

  • Difference between user directory and native directory in Shared Services

    Hi,
    Please any one can help me......
    I am new to Hyperion, what is difference between Hyperion Shared services Native directory and User/Active directory.
    thanks in advance..............

    Hi,
    Shared Services native directory, as the name suggests, is a user directory (i.e. ldap) that is native to Hyperion. It allows you to create users, groups and define access rights to Hyperion Products. User/Active directory is the directory where users in your company reside. Shared Services can connect to it and retrieve the list of users and groups. You can define the access rights for these users if you configure the system in a way that it works with Active Directory.
    You can use both combined also. Meaning, you can create user groups in native directory and assign native directory users into them and define access rights onto user groups and/or users.
    Cheers,
    Alp

  • Does anyone know anything about nathanjr and why I am sharing my computer ?

    I just purchased my MacPro about a month ago, and it is saying that I share the computer with nathanjr. I am wondering if I haver a virus or worm or it is something someone might know something about. Thanks I don't want to share my computer with nathanjr.

    If you mean that you see a computer under the Shared column in the Finder, it doesn't necessary mean that they are connected to your computer. It means that nathanjr's computer is able to connect with you if you wish. Now, if you see this in your own home network or something that most likely means you're network is not protected by a password and everyone can use it.

  • Advanced and complicated architectural situation: Shared Service Application with Workflow ?

    Hi Forum,
    I am currently encountering a peculiar situation in our SharePoint 2013 environment (Let's call it Farm-1), and I would really be thankful for your creative suggestions.
    Whenever we create any simple workflow on our Farm-1, it NEVER worked, and we get the exception:
    RequestorId: 26f1da47-f3e6-0816-0966-df958cd57c7d. Details: System.ApplicationException: HTTP 401 {"error_description":"The server was unable to process the request due to an internal error. For more information about the error, either turn on
    IncludeExceptionDetailInFaults (either from ServiceBehaviorAttribute or from the <serviceDebug> configuration behavior) on the server in order to send the exception information back to the client, or turn on tracing as per the Microsoft .NET Framework
    SDK documentation and inspect the server trace logs."} {"x-ms-diagnostics":["3001000;reason=\"There has been an error authenticating the request.\";category=\"invalid_client\""],"SPRequestGuid":["26f1da47-f3e6-0816-0966-df958cd57c7d"],"request-id":["26f1da47-f3e6-0816-0966-df958cd57c7d"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"SPRequestDuration":["252"],"SPIisLatency":["1"],"Server":["Microsoft-IIS\/8.0"],"WWW-Authenticate":["Bearer
    realm=\"73b2c214-338d-4c93-937f-5852744a020d\",client_id=\"00000003-0000-0ff1-ce00-000000000000\",trusted_issuers=\"00000005-0000-0000-c000- ---
    I have seen a handful of posts suggesting running the User Profile service and its Synchronization.
    Also, I have see the presentation of: Spencer Harbar and Wictor Wilén on: (http://channel9.msdn.com/Events/SharePoint-Conference/2014/SPC356) where at minute 28:00 an slide 40 stating that as a requirement: User Profile Service Instance and Service Application,
    Users must be populated in the Profile store and have valid User Principal Name (UPN).
    My question is:
    On our environment (Farm-1) we are consuming the User Profile service application from other separate SharePoint 2013 environment? Any workaround?
    We really do not want to set up another User Profile service application onto our environment (Farm-1), Any possible workaround to make the current shared User Profile sufficient to run the workflows correctly?
    What can be done?
    Thank You 

    Hi ,
    For troubleshooting this issue, let's verify the followings:
    What action did you use in your workflow? Please test just using “Log to history list” action, compare the result.
    Please go to Central Administration->User profile service application, check whehter the user that you run workflows has user profile in Manage User Profiles.
    As you are using SharePoint 2013, what platform did you use when you created workflows? Please try to create a new workflow using SharePoint 2010 plaform.
    Whether this issue occurred on all web applications in your Farm-1.
    Please open a problematic site collection->Site settings->Manage site features, make sure the feature “Workflows can use app permissions” is activated.
    If you met this issue only for SharePoint 2013 platform workflow, you can also try to re-register workflow service via Register-SPWorkflowService.
    More information about register workflow service:
    https://technet.microsoft.com/en-us/library/jj663115(v=office.15).aspx
    Best Regards,
    Wendy
    Wendy Li
    TechNet Community Support

  • Shared Services and Essbase

    Hello All,
    Pretty much an undesired Bug, Basically there is an ID listed as an Essbase admin which yes it was few months back. At present that ID has been removed from Shared Services , also I checked in the list of Essbase Users within EAS and did not find the ID.
    Interesting thing ***** When I exported the Essbase security file I could see that ID listed as an Admin , not sure how it comes up only in Security file but not any where else.
    Is there any issue between Essbase and Shared services communication, because the Essbase should refresh Manually for any changes in the Shared Services.
    Any comments Friends ?
    Thanks !!

    Its probably worth having a read of the following docs in Oracle Support as they should give an idea
    Deleting a User/Group from Shared Services Does Not Delete it from the Essbase Security File [ID 1388447.1]
    How to Delete a User from the 11.1.2.x Essbase.sec File [ID 1396890.1]
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Shared services security and essbase security

    recently upgraded to sys 9 and now use shared services 931
    we used to have security at essbase level previously and now its all Shared services..
    now i have so many concerns
    Can we automate the security just like I used to automate in essbase earlier...
    or can we automate secuirty in essbase and them sync it to Shared services??
    I know that we change security settings in SS and then sync it to essbase but is the other way around possible???
    IF yes HOW?
    IF NOT - can we automate SS security which reflects to essbase...
    I have to go through the prod doc and I'll do that very soon but any suggestion on this would really help me out..
    Thanks in advance

    Hi,
    can you please write more about which products and version are you using and on which operating system name and version.
    Why do you use Shared Services? Are you using only Essbase server or any other server? If you use only Essbase server there is probably no need of using Shared Services.
    If you need only Essbase you can see my info about installing Essbase without Shared Services: hyperion essbase installation
    Please provide more info, so that we on forum can help you.
    Regards,
    Grofaty

  • Does the NetWeaver04Sr1 support JAX-RPC101 and JSR109 Standards?

    Does the NetWeaver04Sr1 support JAX-RPC101 and JSR109 Standards of Web Services???
    thank you very much?

    Hi Frank,
    I think this is only partially true.
    This enhancement only affects the condition editor (i.e. the namespaces within xpathes). For External Definitions the restriction persists. However, there is a simple workaround.
    When having defined your External Definition you will see a correct WSDL on the WSDL-tab. This WSDL contains the required message definitions. Unfortunately these message definitions are not displayed on the messages-tab because the target namespace of the WSDL is too long.
    Here is what you can do in this situation: Download the WSDL to your local file system. Edit this WSDL with notepad. Thereby simply replace the target namespace of the WSDL (not of the XSDs in the types-section!) by a shorter one. Upload this WSDL as another External Definition (category WSDL). You may worl with this External Definition now.
    This works because the target namespace of the WSDL has no influence on the structure of the message.
    Greetings
              Stephan
    Remark: Frank Beunings has added his answer inbetween. My answer was to Frank Bakermans.
    Message was edited by: Stephan Naundorf

  • Configuration of 2 Essbase Servers on one Shared Services Server

    Hi,
    Components Installed:
    Essbase Server and Shared Services on 1st Server
    Workspace, HFR and Web Analysis Installed on 2nd server. I have configured them and everything is working fine. No issues with this environment.
    Requirement:
    There is a Essbase server installed on Server 3. Its a Standalone. We want to make use of the Application created here and its security(groups etc) for creating reports through Workspace.
    Question: Can I configure this Essabase server to the Shared Services which sits on Server1 (which already configured with Essbase already). If it is, are there any risks that we need to consider here.
    Please advise me on this.
    Thanks, UB

    Thank you so much for your quick solution.
    Please correct me If I am wrong here.
    1) I need to run the configuration Utility on Server3 and give the same details used for Essbase in Server1. or
    Is it ok if I run the Register with Shared services through Essbase Console on Server3 and point to the Shared Services server. I think by doing this, one more Essbase Node created in the Shared Services and the security on Essbase Server 3 can be utilized for generating Reports from Workspace.
    Please advice John..
    Regards, UB

  • Error with Active Directory Synchnorisation from Shared Services to Essbase

    Have recently installed HS9 v 9.3.1
    In Shared Services i have created both native and MSAD users. Everything works fine with the native users (Planning,EAS etc...)
    MSAD user directory has been configured & tested -ok on Workspace.
    The MSAD users have been provisioned and can access Workspace & Shared services without any issue.
    However, when accessing Planning, the following error is displayed in the Essbase server log:
    Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Create External User With Type (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051205)
    Single Sign On function call [css_getUser] failed
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051205 processing request [Create External User With Type] - disconnecting
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Set Application FrontEnd Type (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Set Application Id For Planning (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Get Security Mode (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
    Received client request: Re-Sync User/Group with Single application (from user [hyperion])
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051590)
    Synchronization started for user/group [MSADUser]
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051591)
    Synchronization completed for user/group [MSADUser]
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051013)
    User/group MSADUser does not exist
    [Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051013 processing request [Re-Sync User/Group with Single application] - disconnecting
    ---------- When accessing through XL Addin, the foll is displayed:
    [Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Error(1051012)
    User MSADUser does not exist
    [Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Warning(1051003)
    Error 1051012 processing request [Login] - disconnecting
    Thanks !!!

    Hardcode IP addresses instead of the server names in the essbase.cfg file and the Shared Services CSS.XML file for the Shared Services server references.
    Restart SS/Essbase, provision an MSAD user, then do a Refresh from Shared Services in AAS.
    Verify your MSAD userID then shows up as an Essbase user in AAS(Display User list for the Essbase server)
    As long as the MSAD users show up in the user list, they should be working.

  • New group in Shared Services does not come up in projects?

    Hi All,
    I'm working on a system that has externalized security, and we use Hyperion Shared Services to add users to groups and assign filters to groups.
    I have just added a new group in the analkytic server in shared services, I have also provisioned it to have filter access of a particular DB.
    When I go to the projects folder and check the list of groups under the application, to look for this group so I could assign the filter, I dont find the group listed.
    Does anyone know what I am missing out on.
    Thanks in advance.
    Anindyo

    Hi John,
    I tried to delete the group and create a new group again:
    searched for the group, right clicked on it and clicked on Provision.
    Then I expanded the Analytic server tree to the left, selected server Access, and moved it using the arrow button.
    Then I expanded the DB name, there were "Provisioning Manager", "Application Manager" and "My Role".
    I expanded the Tree of "My Role" and found "Calc", "Filter" and "Read".
    I expanded the tree "Filter", and found Start/Stop Application.
    I selected "Filter" (not Start/Stop Application) and moved it to the second list on the right using the Arrow button.
    Then I clicked on the save button.
    Now I expanded the Projects Folder:
    Clicked on the DB to which I provisioned this group.
    It showed the list of users and groups to the right.
    I selected groups in the drop down.
    Clicked on refresh, but the new group does not appear.
    Please let me know if I missed out on anything.
    Thanks for the response,
    Regard,
    Anindyo

  • Migration and Shared Services

    Currently thinking about migrating two cubes: one in version 6 and one in version 7 to 11.1.2. Here are the steps I am considering following:
    - Recreated the applications in EAS version 11.1.2.
    - Copy over .otl, .rul, .csc etc files.
    - The .cfg files in 11.1.2 - not sure what to do about this one. Do they have to be the same as in the previous versions? What do I do about the configuration settings that have changed from the old versions to new versions.
    - Security. Version 6 and 7 dont have shared services. So does security have to be recreated from scratch?
    I found a wealth of info on migrations on these forums, but these two particular questions evaded me.

    For security have a look at the Advanced security manager, free tool :- http://www.appliedolap.com/free-tools/advanced-security-manager
    Failing that you could look at extracting the security information using maxl/esscmd then pushing it into 11.1.2 using maxl or LCM
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Porting the Essbase/Shared Services to other landscape.

    Hi ,
    I need to port/refresh the Essbase/Shared Services (11.1.1.1 on Windows) from Development Environment to Test Environments. Both Environments are under different domains and I dont think I can usre LCM. I have already setup the Foudataion/Shared Services and Essbase on Destination Host. Can someone guide me how I can move the Essbase/Shared Services accross these Environment manually. Any document refrence or step by step instruction will be great help.
    Thanks in advance.
    -Samar-

    John,
    I never worked with CSSImportExport. I will be moving Planning Applicatoin, HFM and FMD along with Shared Services and Essbase. Can I use CSSImportExport for HFM/FDM etc. If you can point out to any good working example or doc on CSSImportExport that would be really very helpful to me. In the mean time , I willl be googling arround the internet about it.
    Regards
    -Samar-

  • Externalizing Users from Essbase to Shared Services in OEPM 11.1.1.2

    Hi All,
    I have a strange problem like when we installed and configured EAS, Essbase with Shared Services these products are moved to the control
    of shared Services. I know that in EAS after configuration the control moves to HSS, but Essbase control also moved to HSS
    Is it possible for Essbase without using Externalize option to have control from Shared Services
    I didn't use the Externalize feature from Essbase to move the user information to Shared Services
    I need to migrate the users on 7x server to 11x server..Is it possible from 7x as it is not registered with Shared Services
    If not do i have any alternative to get the user/group info from 7x to 11x server.(These are on two different servers)
    Please clarify and let me know if i need to produce more information
    Thanks,

    After you copy the SQL Repository across to the new environment and log in with the owner account, you will be required to register the application with Shared Services. After registering with SS it should prompt you to "Migrate Users and Groups" which will do the migration for you.

  • Issue externalizing the Essbase security to shared services

    Guys,
    I am facing an issue while externalizing the security to shared services in Hyperion Essbase 9.3.1. When i tried to externalize the users in Essbase 9.3.1, i am getting the error
    "Error: 1051400: Analytic Services has already been migrated to Shared Services Mode". But i dont see any options when i right click on the security tab. i am seeing the same options
    as we have before migrating to shared services like Externalize Users. Also when i tried to create a user in Essbase, it is giving the following error msg.
    "Error: 1051484 Cannot change CSS Authenticated User to Another Authentication Type After successfully migrating that user to Shared Services". Errors are showing my security is in shared
    services mode. How i can test if it is really in shared services security mode.
    One other thing is, when we installed Essbase, we used 'admin', 'password' as user credentials. Does these have anything to do, as i saw in one thread that 'admin' is not recommended for Essbase while configuring shared services.
    Thanks in advance
    PM

    Forget this thread. I am able to rectify the issue. We forgot to give access to temp folder of EAS Console.

Maybe you are looking for

  • Problems with iTunes 7 cover flow and remote desktop

    Hi. iTunes 7 is an amazing upgrade, but unfortunatly the nicest addtion doesn't work for me with remote desktop, which is how I primarily access my music server. When using remote desktop, and I switch to cover flow, I just get a message in the cover

  • Invoking ODI scenario from BPEL using Asynchronous callbacks

    It has been given in many sites that for invoking an odi scenario, odi-public-ws.aar must be uploaded to AXIS2 framework as the web service uses AXIS2 as the web service container. For doing this first the AXIS2 should be deployed in OC4J. I am worki

  • I am unable to Install windows xp with recovery disks.

    I have a Toshiba's Satellite Pro S300-10J laptop Model#PSSB0E-02H00FDU. Some days back its operating system got corrupted. I have its recovery disks(windows Xp)  and now I am trying to reinstall the windows by using recovery disks but unable to do so

  • A particular album has no art in cover flow

    I was adding cover art to my Touch for my non-iTunes music with iArt last night. For some reason, the cover art for "Who We Are" by Lifehouse won't appear in Cover Flow, but it does show everywhere else (song listing, as wallpaper while playing, etc.

  • Restore Comments in blog entries?

    Had some mess with iWeb 2.x and returned to iWeb 1.x Now all blog comments are gone. Is there any chance to restore them? Thanks, willi