Does Shared Services impact Planning application perfomance?

My client has a fairly complex security design with a hierarchy of a large number of groups (~500) providing access to Essbase, Planning apps, dimensions, forms, task lists, etc. In addition, there is large number of users (~1000 including report viewers).
We are seeing performance issues when logging into workspace or planning directly, in addition to extended times for forms to render. Would the security design impact system performance? Or is that not a consideration, given that the essbase security filters are refreshed successfully?

Does this happen all the time or at certain times? As far as I know, security shouldn't impact performance. We have a pretty complicated security design here, and only time it effects users is when I have to refresh the security during business hours. Some users have complained about losing their connection to SmartView or not being able to see planning web-forms. Therefore we usually refresh security early in the morning or at night.
The reason I asked if this happens all the time or at certain times is that there are many other reasons that could effect the performance such as calcs running in the background and using a lot of memory and cpu, many users are performing data input or ad-hoc at the same time, etc.
Hope this helps.
Mehmet

Similar Messages

Shared Services and Planning Synchronization

Ok, this is probably useful for a lot of people, but can anyone articulately explain the relationship between MSAD (or whatever the source security system is), Shared Services, and Planning? There are like 5 utiities and or Web Client buttons that claim to sync different parts to each other.
MSAD is the source system. It is "plugged into" Shared Services. (Are these always in sync, is there some utility to run to sync them?)
Then there is this Shared Services "Native Directory" what is this? There is a "Sync Native Directory" button in Shared Services, what does this sync?
Assuming that SS is synced with MSAD, we then turn to Planning. In Planning, there are "Migrate Identities" and "Remove Non-Provisioned Users/Groups" buttons. What do these buttons sync, and is Migrate Identities the same as the ProvisionUsers.cmd utility?
I want to know the best way to keep all this in sync, MSAD to SS and SS to Planning. Is any of this automatic, and if I need to run manual utilities, which ones do I need to run and which "buttons" do I need to push.
thanks
-Patrick

Hi,
Ok here goes, I am not really sure which version you are on because there was a bit of a change between 9.2 and 9.3 with regards to MSAD (uses the ObjectGUID instead of SamAccountName)
Sync Native Directory - Shared Services contains all the product registration details, OpenLdap (Native Directory) stores all the provisioning, sometimes it is possible they could go out of sync which is pretty rare, so the sync native directory makes sure Shared Services and Open Ldap are in sync.
Migrate Identities - I think this is more of the line of the updateusers.cmd utility where if a user has changed in the directory (this was more of an issue when SamAccountName was used as users group change OUs in the Active Directory) it will update the planning table with the new details.
Remove-Non Provisioned Users/Groups - I am sure this doesn't actually work and has been removed in later versions, it is meant to clear up users/groups in the planning tables where there don't exist in Shared Services anymore.
It depends what you mean by is MSAD always in sync with Shared Services, if you are using 9.3 and configured to use the ObjectGUID then it is pretty much in sync as the id is not likely to change, if you are using SamAccountName and a user moves place in the organisational structure then it can go out of sync. There is another ultilty for that :) (update native directory utility)
If you run the provision users utility after you have provisioned a user in shared services it will add the user to the planning tables and also push the user to essbase.
All depends what you are finding is it a problem to what utility to you want to use.
Cheers
John
http://john-goodwin.blogspot.com/

Installation of Essbase, Shared services and Planning

Hi,
I am using Essbase (64 Bit), Shared server and Planning +mandatory component of hyperion:
Can i install 32 bit applications Planning, Shared services, Analytic Provider on 64 bit OS (windows 2003 EE)
Regards
Kumar

Cross post :- Installation of Essbase, Shared services and Planning
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services in Planning

Hi,
We have a scenario wherein we are installing planning software along with the Shared services on one windows box and Essbase and the Oracle Database on another windows machine.Before proceeding further i would like to get some inputs from the experts what are the Pro's and Con's of doing this.
Do we need to install the Shared services on both the machines?
What can be the best way to split the components accross the two windows machines.
Any iputs related to this will be much appreciated.
Thanks,
GRN

Hi,
All depends on the load you are going to put on the servers, size of cubes, amount of calcs, amount of concurrent users, activities etc..
Lots of clients have different configurations all depends on how they are using the system.
It is usually good practice to keep the essbase server on its own and keep the app servers together.
Once again it all depends on what products you are going to be installing and how they will be used.
Cheers
John
http://john-goodwin.blogspot.com/

Planning project not showing in shared services and planning app wizard

I installed planning ver 9.3.1 and now when want to create a planning application, the 'planning' option is not showing in app wizard. It is also not showing in shared services project list. Can you please guide...
Thanks & Regards.

Thanks for the reply. I can login to planning AppWizard but when want to create a planning application, in the drop down of shared services project, the 'planning' option is not coming.
As I have installed planning afresh, so right now no planning application I have in my computer. so, no meaning to login to http://localhost:8300/HyperionPlanning/ because it is showing 'no application'.
Please revert back for any clarifications.
Thanks & Regards.

Deploying Shared Services in Oracle Application Server

Has anyone deployed Shared Services (9.3.1) in Oracle Application Server? We are trying to deploy SS in Oracle Application Server and are not able to do it. Any suggestions?

I think SS work's only under Apache Tomcat
I was try deploy SS 9.2.1 and 9.3.1 on Oracle iAS and Weblogic 9.2.MP1
and have similar error.(- can't register planning application)
But Planning and EAS on Oralce and Weblogic works fine .
p.s. OiAS - it's closed product - use Weblogic for new ENV.
If you need detaled instruction for setup - please read documentation
http://www.oracle.com/technology/documentation/epm.html
http://hack4essbase.wordpress.com/2008/08/07/weblogic-classpath-and-env-for-hyperion-planning/

Issue bringing up Shared Services and Planning

Hi guys,
We have added 3 new MSAD to our Shared Services for user authentication, previously we already had 2 setup and working fine.
Now that we added the 3 new ones, we restarted Planning and Shared services and now it doesn't come back up.
We see the following error message on the logs:
2009-11-27 17:05:09,702 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=x,DC=Corp'
2009-11-27 17:05:09,811 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=xx,DC=Corp'
2009-11-27 17:05:09,936 [Thread-23] WARN com.hyperion.css.spi.impl.msad.MSADCacheUpdater.updateUserCache(Unknown Source) - Ignoring User. Error getting User for User Cache:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=IL,DC=xx,DC=Corp'
These "xx" we are just using because of the company name but it has the right name
That's the security log for Shared Services.
Do you have an idea of what I can do either to bring it up with the new MSAD or delete the newly created and bring it back up?
Thanks in advance

Usually your MSAD admins will have a master domain setup that has access to all geographic specific domains. You would have a user setup in this higher level domain
Let's say you have the following setup:
na.ad.co.com
sa.ad.co.com
eme.ad.co.com
jp.ad.co.com
cn.ad.co.com
You would just need one domain setup at ad.co.com with a user who has read access to that directory. The way Shared Services security is setup you may need to re-provision some users with that new global provider and I highly recommend using a group filter -- your group filter can be in any of the domains just all users would need to be added to it in that domain.
Regards,
John A. Booth
http://www.metavero.com

Using common shared services for Planning & HFM

Hi All,
I've already installed Planning and shared services in one server. Now i would like to install HFM on other server, but would like to use the shared services on the first server. In this case, during the installation on the second server, do i need to uncheck the Foundation services ? What other products that i've to uncheck. How about Reporting & Analysis Framework ? Pls. advice
Thanks,
PVR

You will need to only carry out the following step in regards to foundation on the HFM server
"When you configure in a distributed environment, you must configure the Shared Services database on every machine. On the first machine, you are setting up the Shared Services Registry. For configurations on subsequent machines, choose “Connect to a previously configured Shared Services database.” In this case, you are letting the machine know the location of the Shared Services Registry."
Then configure the HFM components.
Cheers
John
http://john-goodwin.blogspot.com/

Does business service have an application service for secure access?

Hi
Recently we had faced a strange situation when we are attempting to execute a script
these are the steps i followed
*1.Created a business service*
This is my business service with service name CILCSVAP
<schema pageAction="read">
<said mapField="SA_ID"/>
<indt mapField="START_DT"/>
</schema>
*2.Added the above business service in service script and used the edit data step to invoke the bs*
No application service given for the script.
invokeBS 'Cm_serviceagreement' using "cm_serviceagreement"
Now when i execute the above script
i am getting the following error
You are not allowed access (directly/indirectly) to this account.
* Description: Please contact your security administrator to check your security for this account.*
I know that this error occurs if a user doesnt has accesss to a account but i had checked that too by verifying account's accessgroup which i am using,then its access roles then i had checked that user with which i had logged in is present or not.yes it is present
Now i am wondering whether business service has an application service
I cant find any field for entering application service on business service page.
Although i have access to execute the script and the business service why i am getting this error,plz help.

Hi shanker,
I'm working with MDM 2.0 and I've a field to enter an application service.
During my customizations I've used the 'default execution application service'.
I've tried to attach an image to this post, but it seems to be not possible.
When I add a new business service, I got these settings:
* Business Service (in your case CILCSVAP)
* Description
* Detailed Description
* Service Name (Name of the System Service)
* Application Service (I've used F1-DFLTAPS)
and on an additional tab the Schema of the BS.
Please check if the application service is assigned to your User Group and if the execution right is set.
/Markus

Edit Button does not appear in Planning Application?

Hi ,
I have created one application in Planning. Using “Outline Load” utility I have loaded metadata in this application.
But now I am not able to add any dimension or member in this application. even I am not able to add,edit or delete any member in the same application. I am not able to change any properties of member as well as dimension.
If I created any new application in the planning then all the buttons are appear in that application so, I can Add,Edit, delete any member or dimension in this application.
could you tell me what happened in my First application so because of that I am not able to view any buttons like add,Edit,Delete ?

Did you convert the application to EPMA?, if so then you can only edit members in EPMA not in Planning^^^A pox upon EPMA.
OP, did you really go through the step of converting a Classic app to EPMA? That would be pretty dramatic if true. And painful, as you have maybe found.
Regards,
Cameron Lackpour

Planning App Settings - Shared Services URL grayed out

I am int he process of doing a clean install of epm 11.1.2.2. I have created a planning app in and the shared services url under application settings is incorrect. The name of the RDB server was picked up instead of the planning server. I need to change this because lcm is unable to get artifact listing for planning app. Does anyone know how or where I would go to change this? The operating system is Windows 2008 R2 with a MSSQL for the RDB.

Hi John,
I tried unregistering and reregistering, logged into the app through workspace which didn't change anything. I haven't been able to locate the url to connect directly to planning. Can you help? Also, I wanted to mentioned that in the earlier version of planning, 11.1.1.2, the shared services URL is not grayed out. When I saw that I thought it might be a security issue but the user has full rights.
Thanks,
Mike

Shared Services: adding users to Planning

Hi,
I'm having a problem creating users to and provisioning them to Planning. I'm not getting any error in the web interface but the users are not being added to the relational Planning database (HSP_USERS), however groups are. When I can also add the created users to a group but they are failing in the Planning logs with reference constraints, because the user is not present on the users table.
Does shared services have a log to check if I'm having any error while creating the users?
Thank you

Hi,
I dug into the logs and found the following:
EPMCSS-00001: Failed to initialize EPM Shared Services security instance. Component SYSTEM9/FOUNDATION_SERVICES_PRODUCT/SHARED_SERVICES_PRODUCT is null in EPM System Registry. Verify EPM System Registry configuration.
at com.hyperion.css.registry.RegistryManager.initRegistry(RegistryManager.java:109)
at com.hyperion.css.registry.RegistryManager.<init>(RegistryManager.java:94)
at com.hyperion.css.registry.RegistryManager.getInstance(RegistryManager.java:131)
at com.hyperion.css.CSSSystemFactory.getCSSMode(CSSSystemFactory.java:102)
at com.hyperion.css.CSSSystemFactory.getCSSSystem(CSSSystemFactory.java:71)
at com.hyperion.css.CSSSystem.initCSSSystem(CSSSystem.java:319)
at com.hyperion.css.CSSSystem.getInstance(CSSSystem.java:273)
[Thu Apr 26 12:51:14 2012]Local/ESSBASE0///1876/Info(1051283)
Retrieving License Information Please Wait...
[Thu Apr 26 12:51:14 2012]Local/ESSBASE0///1876/Info(1051286)
License information retrieved.
[Thu Apr 26 12:52:01 2012]Local/ESSBASE0///1876/Error(1051223)
Single Sign On function call [css_init] failed with error [CSS Error: CSS method invocation error: getInstance: Failed to get CSSSystem instance, please check SharedServices_Security_Client.log for more information]
[Thu Apr 26 12:52:01 2012]Local/ESSBASE0///1876/Info(1051198)
Single Sign-On Initialization Failed !
So it seems it's a problems in the EPM System Registry. Can you advise me please? How can I clean the EPM System Registry of problems? I think this might have happened when I changed the database servers, but I configured the registry again and I thought it was healthy again since I only had problems some days ago when I tried to add new users.
Thank you

Failed to register Planning with Shared Services

Hi,
I am trying to configure Hyperion Planning and it says "failed" for all the components. It doesn't want to reconfigure Shared Sevices either.
I am using EPM 11.1.1.3.
Can someone help?
Thank you!

I have finally managed to install and configure all the components, and when I try to log in to workspace I either get the message error: "1009902" or I log in and I can't find Planning Administration in Navigate->Administer->Classic Application Administration->Planning Administration. I have previously created using Shared Services a new application group called Planning. Plus, Shared Services only works if I periodically restart the database services, otherwise I get a communication error, either when loading the view pane, or when loading tree data etc.
And when I try to access the following url: http://servername:8300/HyperionPlanning/AppWizard.jsp, i receive the following error:
"The requested resource (/HyperionPlanning/AppWizard.jsp) is not available."
Here is the log for error 1009902:
1009902
com.brio.one.common.DatabaseException: 1009902
     at com.brio.one.common.utils.CommonIdlUtility.convert(Unknown Source)
     at com.brio.one.common.utils.CommonIdlUtility.convertCorbaException(Unknown Source)
     at com.brio.one.common.utils.CommonIdlUtility.convertCorbaException(Unknown Source)
     at com.brio.one.services.proxy.BusinessServiceProxy.convertCorbaException(Unknown Source)
     at com.brio.one.services.sessionmanager.proxy.SessionManagerProxy.createSession(Unknown Source)
     at com.brio.one.client.proxy.ClientProxy.recreateSession(Unknown Source)
     at com.brio.one.client.proxy.ClientProxy.createSession(Unknown Source)
     at com.brio.one.web.launcher.util.LauncherUtil.login(Unknown Source)
     at com.sqribe.WS.WebSQRIBE.loginToRepository(Unknown Source)
     at com.sqribe.WS.WebSQRIBE.newUser(Unknown Source)
     at com.sqribe.WS.WebSQRIBE.run(Unknown Source)
     at com.sqribe.WS.WSBaseServlet.executeRequest(Unknown Source)
     at com.sqribe.WS.WSBaseServlet.service(Unknown Source)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
     at com.hyperion.bpm.LocalizationServletFilter.doFilter(LocalizationServletFilter.java:69)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
     at com.hyperion.i18n.filter.Utf8Filter.doFilter(Unknown Source)
     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
     at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
     at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
     at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
     at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
     at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
     at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:754)
     at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:684)
     at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:876)
     at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
     at java.lang.Thread.run(Thread.java:595)
I would greatly appreciate any help! Thank you!

How to sync user for planning from Shared Services

Hi ..
Can anybody please let me know how to sync users for planning from shared services.
Thank you.

You need to expand on your question.
But the basic concept is you create or connect (for LDAP) users in Shared Services. You also create groups as required for these users. Then in shared services you provision those user to Planning applications (directly or indirectly through groups)
Then in Planning you will see users or groups. And in planning you connect them to either members in dimensions or to objects like Forms, Task lists, Business Rules.
There is therefore no such thing as synching Shared Services with Planning.
Note: the 2 steps mentioned above can be done in batch through load utilities.
Please expand you question if necessary

Corporate User Accounts - Shared Services - Planning

Hello,
I have a question related to corporate user accounts.
Suppose there is a corporate ID that was given access to planning, had the required provisioning in shared services and had the dimensional level security applied. Now this user no more works for the organization and so the corporate ID is no more active.
What will happen in shared services and planning. Will it still have a record of that account and we will need to manually clear it everytime situation like this is encountered or since it is a corporate ID shared servicies and planning know for itself that this ID is no more active and valid.
I would appreciate if someone could clear this doubt.
Thanks in advance.
~ Adella
Edited by: Adella on Sep 22, 2011 10:43 AM

In theory if the ad account is no more then the provisioning is removed, now in the past there has been problems where if you don't deprovision a user first before they get deleted from the ad then the user still exists in certain tables and becomes stale.
Sometimes utilities like provsionusers and updateusers would sync up to shared services and remove any stale users, sometimes they had to be manually removed.
I have not actually tested or seen what happens with the latest version to see if it actually manages to clean up all stale users without any issues.
Cheers
John
http://john-goodwin.blogspot.com/

Does Shared Services impact Planning application perfomance?

Similar Messages

Maybe you are looking for