EAS security

Hi Guru's
is there any way i can create a user who can see only one application in EAS. rest all application should not be visible to that user and only admin can see all the other application in EAS.
thank you

i have provided with the provisioning and application manager role of demo and sample application . And even i have refresh the security from EAS.
In EAS i can see only essbase server and no application under it . when i right click on the server to create application but that application is disable.
can you please tell me if i am missing any step
thank you

Similar Messages

Where are the EAS security policies stored? "Reset Security Policies"?

When you connect Mail app to an account using EAS, security policies from the Exchange server are applied to Windows 8.1. I know that these can be reset by going to Control Panel -> User Accounts and then clicking on the "Reset Security Policies"
option.
However, I would like to see which policies are being applied by the Exchange server, but I can't find where Windows 8.1 is storing the policy settings. Are they in the registry? Can I see them in the GPEDIT local policies?
For example, our Exchange server sets the "Max inactivity time lock" to 15 minutes. I would like to be able to see exactly which Windows setting is storing this value and enforcing it.
I've verified that it's overriding settings already in place that are stored in:
Computer Config - > Windows Settings -> Local Policies -> Security Options.
or
Computer Config - > Admin Templates -> Control Panel -> Personalization
or
User Config -> Admin Templates -> Control Panel -> Personalization
Does anyone have idea where I might be able to view these policies in Windows 8.1?

Hi,
Aboved suggestions is description of the EAS policy.
If you need further assistance, feel free to let me know. I will be more than happy to be of assistance.
If the reply is helpful, please remember to mark it as answer which can benefit our Community members. Otherwise, please unpropose it and post back with your further concern.
Kate Li
TechNet Community Support

EAS: Security mode

Hi all, I installed EAS 11.1.1
While configuring essbase server, I specified "Deploy Essbase in standalone mode"
As I understand it relates to Essbase server not to Administration Server.
When I see in EAS console -> Administration Servers -> myadmserver -> properties: configuration tab-> shared services properties:
there is a locked "Shared services security mode" checked checkbox.
"Shared services security mode" is checked because it was registered with shared services. Am I right?
On which step it was registered while configuring? (I didn't see any option like "register with shared services", I only saw this in the configuration confirmation window)
Can I unregister it?
Edited by: Vovanenok on 13.02.2009 3:03

Hi,
If you ticked "Deploy essbase in standalone mode" then essbase will be using Native security and will not have been converted to Shared services mode.
By default in V11 EAS will get registered with Shared Services.
I am not sure what the problem is because you will be able to add members to essbase directly through EAS and will not have to use Shared services.
Cheers
John
http://john-goodwin.blogspot.com/

EAS Security officers

We are trying to setup a group that can create groups and addusers that have been setup for Essbase. The individuals inthis Security group can create the groups and add users but can notadd application access to these groups. Also they would liketo be able to see what groups have access to their cubes. It appears that this groups has to be setup withApplication Designer access to get the power to do what wasdesribed above. We don't want our security officers to havethis power. Is there a way to create our own roles in EAS? We want to separate the duties of security from cubedesigner.

Hi,
If you ticked "Deploy essbase in standalone mode" then essbase will be using Native security and will not have been converted to Shared services mode.
By default in V11 EAS will get registered with Shared Services.
I am not sure what the problem is because you will be able to add members to essbase directly through EAS and will not have to use Shared services.
Cheers
John
http://john-goodwin.blogspot.com/

Refreshig security from shared services

let us assume that we are creating 5 users in shared services and provisioning them with different privileges. when refreshing these users security from shared services to essbase , i need to refresh the security of only one particular user role, how can i do that?

if using 9.3.1 later version u can use Shared servicves patch whcih will automatically update the security
or esle right clik on EAS security > refresh security from shared services > all users or currecnt users
which will update ur security
Refresh each user or group individually using MAXL command:
alter user username sync security with all application;
alter group groupname sync security with all application;

The RDBMS for EAS

Hi There, I understand an RDBMS is required to use the Log Analyzer functionality in Essbase Administration Services. Lets say, one doesnt want to use such functionality. Can one install EAS without a relational database?? Thanks Kizi.

EAS uses a database a repository for a number of reasnons, not just for log analyzer. For example, EAS security and user configuration resides on the database. For small installations, the bundled MySQL database is quite sufficient for use. You can use to another RDBMS if you have one easily accessible. Our production EAS runs on the WebSphere app server and the SQL Server RDBMS that we have for our Anayzer and Reports applications. But I keep another instance of EAS Server on my desktop using the bundled Tomcat and MySQL. The repository is necessary for the operation of EAS. So you will need an RDBMS to run EAS. But the good news is you can easily use the bundled MySQL database incurring no cost for the RDBMS. The MySQL database uses few system resurces in support of EAS, and the installation does all of the required administration.

EAS Inactivity Timeout

Alright, so 1.1.0 gave us lots of great EAS security policy support including Inactivity Timeout:
Inactivity timeout. IT administrators can ensure that an inactive phone goes into a locked state after a certain time period. You cannot set a higher timeout interval for your phone, but you can set a shorter interval.
Okay, so where do we set this value on the phone? Right now every single time I slide my phone open or press the power key I have to enter my password to unlock the phone. My company's security has the inactivity timeout set to 8 hours on the exchange server. Any help would be great, we have high security passwords (lots of characters, numbers, special chars, etc) and I hate having to enter it just to repond to a text message or something trivial and not business related.
Any help would be appreciated. Thanks!
Post relates to: Pre p100eww (Sprint)

The user manual suggests it is linked to the screen timeout, which for reasons of battery life, usually would be way less than 8 hours.
The screen locks five seconds after it turns off automatically, or immediately if you turn the screen off manually. Use Secure Unlock if you want to require a PIN or a password to unlock the screen.
Don't know whether there is a way to decouple these time intervals.
(Also, I was looking at the original user guide, which may not match the updated OS.)
Message Edited by Jeffro on 07-29-2009 03:28 PM

KNOWN ISSUE: HTML Messages with plain-text signatures

To get around the EAS security policy issue, I'm having non-sensitive emails from work forwarded to a GMail account from a redirect set up in our corporate OWA. The redirect seems to send the messages to GMail without any issues; formatting is 100% intact, and in the GMail web client as well as Thunderbird, Entourage, etc., HTML emails with plain-text signature attachments show the plain-text message inline with the rest of the formatted message. All of our internal mailing lists have these plain text attachments that say where the message was coming from (Message sent from [email protected] by listserv). These get affixed to every message, both plain text and HTML.
Here's my problem: The Pre's email client handles both plain text and HTML messages beautifully. But, when I receive a message from a mailing list with a plain text attachment, the HTML portion disappears, and all I see is the signature.
Is there any way to make the Pre show the HTML INSTEAD of the plain text? I can live without the sig, I know where the messages are coming from already. But if I can't read the message, it's useless. I've only begun researching this and so far Google hasn't been much help, nor has searching these or other forums. Any help would be appreciated.
Palm Pre P100EWW
Post relates to: Pre p100eww (Sprint)
Message Edited by HowellBP on 06-16-2009 04:13 PM

1-51626418773
I just got off the phone with Palm Support. Apparently this is a bug in the mail application. It currently does not support parsing both HTML and plain text in the same message. It will read EITHER plain text OR HTML, but not both at the same time. This will be fixed in a future update.

Boot camp windows vista

does anyone know if windows vista will run off of boot camp?

I think thats not correct. HP is selling there notebook with intel core duo and the say are VISTA CAPABLE .
This is what they say
"What's a Windows Vista Capable PC?
The next generation Microsoft operating system—Microsoft Windows Vista—is coming soon. What will Windows Vista mean for you? It will offer new levels of ease, security and reliability, a new interface, and simple ways to organize and search for information on your PC.
We've worked with Microsoft to help ensure that the PC you buy today can run Windows Vista when it's available. All of our new notebook and desktop PCs will be able to run Windows Vista* when properly configured.
Windows Vista will be available in versions ranging from Windows Vista Home Basic for entry-level home users to Windows Vista Home Premium or Windows Vista Business, for those needing more robust features and functionality*.
*Not all Windows Vista features are available for use on all Windows Vista Capable PCs. All Windows Vista Capable PCs will run the core experiences of Windows Vista, such as innovations in organizing and finding information, security, and reliability. Some features available in premium editions of Windows Vista—like the new Windows Aero user interface—require advanced or additional hardware. Check www.windowsvista.com/getready for details. "

Error exporting webform thru formdefutil utilty

Hi,
I am getting the follwing error while exporting the webform from planning through the utility formdefutil
Errors occured during syncrhonization: [com.hyperion.planning.DuplicateUserException: Another user with the name admin already exist
s.]
The FormDefUtil.log fiel says : Failed to sync with user provisioning. Check Planning log for details
The user is an admin and can login to the application successfully.

John,
The user provisioning is failing to sync. I cannot login to the planning server with these ids because it is not a MSAD id but native.
Shall i go for the externalization of all users from EAS-> security-> right click option? will it break anything that is already working?

Windows 8.1 Mail app and Exchange 2010 EAS partnership - "Make Windows user account an Administrator" to meet security requirements?

As the title says, I have a new Windows 8.1 based device which I'm trying to connect to my Exchange 2010 box (SP3 Update Rollup 2). I currently have my iphone set up as an EAS client with no problems. I have an EAS policy on my mailbox
with the following settings surrounding passwords :
Require Password, Require Encryption, Allow Simple Password, Time without user input - 10 minutes. Allow non-provisional devices is also checked.
The Windows 8.1 device has Bitlocker enabled, which meets the encryption requirement - I know this because the 1st time I tried this it moaned about Bitlocker needing to be enabled to meet requirements, though at that time the local user account on the Windows
8.1 device was an admin level account so it never mentioned this issue, it worked normally.
Now, while using a std user account on the Windows 8.1 device and trying to connect up via EAS, it complains that my local windows user account must be an ADMIN level account to meet the security requirements...?
Anyone encountered this?

Did anyone solve this problem? I'm also struggling with this issue.
this is still a problem. I'm just hitting it now and it's not doing much for management's love of Microsoft devices.
Evidently, it has to be an admin to set the policies on the device to match the policies on the EAS. And once set, a user can be changed back.
But this is seriously not cool. Don't the "app" folks and the enterprise folks talk to each other?

Error from EAS - "refreshing security from Shared Services failed"

Hi,
I was using Native only security in HSS for Essbase 11.1.1.3 and EAS allowed me to Refresh security from Shared Services. (Essbase security was already externalized to HSS.)
However, after I added "MS Active Directory", and provisioned a MSAD user to a native Planning group, EAS errors out with "refreshing security from Shared Services failed" .
I checked Essbase security and that MSAD user is not added to Essbase.
From Essbase Log I see:
Essbase failed to get roles list for [ESB:Analytic Servers:servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [ HSS'sMSADname].
I then tried to remove MSAD from our H Shared Services and see if this problem goes away. However, MSAD still shows on the left panel menu in H Shared Services. How can I get rid of MSAD?
Any suggestions?
Edited by: user643332 on May 12, 2010 12:05 AM

Hi,
Are you sure you have removed it from shared services, you may have just disabled it.
You must restart the shared services application server to apply any changes made.
Cheers
John
http://john-goodwin.blogspot.com/

How can I sync security between Plannig, HSS and EAS?

Hi,
I think that I've trouble with security. Many answers at this forum contain that I need to sync security between Plannig, HSS and EAS?
How can I do it on EPM11.1.1.3?

Hi,
If you feel that Shared Services is not in sync with Planning then you can use the [provisonusers |http://download.oracle.com/docs/cd/E12825_01/epm.111/hp_admin/ch03s13.html] utility.
If you want to sync essbase with Shared Services you can either right click security in EAS and refresh from HSS or use Maxl.
Cheers
John
http://john-goodwin.blogspot.com/

Business Rules security from EAS throwing error while adding locations

Hi,
Currently we are trying to provide security to the BR's from EAS. As a part of which, we are trying to add location to the BR's. When we expand the Planning node on Locations, it throws the error, "Cannot connect to the Planning server <server name>". When we expand the Essbase server, we do see the application and database, but after a long time, around 10 mins.
After a call with Oracle, we have restarted the services RMI, EAS and planning in the sequence suggested. Also checked the RMI service, its running fine as well. Below is the error from hbrclient.log
"2011-08-06 20:41:58, 076 Warn AWT-Eventqueue -0 com.hyperion.hbr.core.metadatamanagerserviceremote - cannot retrieve connected rppt element for planning/a01gidssapp2a"
Hbrserver.log doesnt have any error. We also have performed reconfiguration of Planning services, but still no help.
Appreciate if someone can help us resolve the issue, since we have to release the servers for Planning by tomorrow. Thanks in advance.

I assume that you are using BR as calculation module.
1. Try creating a new test user say HBRADMIN,
2. Provide him the admin access to BR, Essbase and Planning App,
3. Log into Planning Application,
4. Check the HBR Plugin Data table in EAS schema/databse, see if there is any entries in that table,
5. Now, Log into EAS console,
6. Try creating a test BR,
7. Select outline,
8. Select Location,
9. Add access.
If there is no entry in the HBR Plugin table, try making a manual entry, below is an example:
HP11113 11333 App1 HP11113 admin AABPAAANAAEKAAEHAABPAADOAAAIAAFG 8/7/2011 1:05:16 PM
AABPAAANAAEKAAEHAABPAADOAAAIAAFG is an encrypted password for 'password'.
Cheers...!!!

Rules security in Calc Manager vs EAS

Maybe I am missing something, but what happened to the ability to put security on Rules now that we are using Calc Manager for our EPMA apps? In EAS Business Rules, we could assign all of our privileges to the rule but now it appears that there is no security. What am I missing? Thanks.

Haha, thanks. So I was missing the obvious!
For my own knowledge, where in the documentation is this piece of info? I don't see it in the EPMA Admin guide with the rest of the Calc Manager documentation.
Again, thanks.

EAS security

Similar Messages

Maybe you are looking for