IOP 11.1.2.0 integration with Shared Services (User Provisioning)

In the IOP 11.1.2.0 install guide, the Admin and Admin provisioning roles are provisioned through Shared Services.
"Provision Integrated Operational Planning Administrator and Integrated Operational Planning
Provisioning Manager roles for the Integrated Operational Planning instance to the Admin user through
Oracle's Hyperion® Shared Services Console
a. Connect to the Oracle's Hyperion® Shared Services Console; for example, http://
hss_server:hssserver_port/interop.
b. Log in as the administrator.
c. Expand User Directories and Native Directory.
d. Select Users and click Search.
e. Right-click the Admin user and select Provision.
f. Expand Default Application Group.
g. Expand the Integrated Operational Planning instance created.
h. Highlight IOP Administrator and Provisioning Manager.
i. Click the right arrow in the middle of the two windows to select the roles.
j. Click Save, and then click OK."
The users and groups are defined in Shared Services, per the IOP 11.1.2.0 admin guide (p. 144).
Is there an IOP user provisioning example in the shared services user's guide, and which version of the guide would I find that in?
Access priveledges are controlled from the Admin workbench for IOP users, per p.145 of the IOP 11.1.2.00 user's guide.
Thank you.

IOP Roles are listed in the 11.1.2 Shared Services User and Role Security Guide, on page 158:
Integrated Operational Planning Roles
Table 39 Integrated Operational Planning Roles
Roles Tasks per Role
Provisioning Manager Provisions users and groups with Disclosure Management roles
IOP Administrator Administers Oracle Integrated Operational Planning, Fusion Edition. IOP Administrators can modify models, access
ACL pages, and perform all Integrated Operational Planning tasks
IOP User P erforms Oracle Integrated Operational Planning, Fusion Edition actions as a normal user

Similar Messages

  • DRM Integration with Shared services

    Hi,
    Could someone help me how to integrate DRM with Shared services? Is there any document which helps me with the same?
    Thanks
    Arathi.

    Hi Arathi,
    You'll be delighted to hear that I found a solution to your question.
    1. Create a user in DRM and select to manage user in "Active Directory", LDAP or NTLM.
    2. Create the same user in Shared Services (same name u wrote in DRM), give it a password then you're done.
    3. When you log into DRM, it will use the shared services password.
    It kinda bothered me that's why i gave it a thought and did a lil bit of reading to find it out. Hope you get it right.
    Regards,
    deep

  • MSAD Configuration with Shared Services

    Hi,
    I have just sucessfully configured MSAD to the HFM SS but 1 concern is that anyone with the domain suer login is able to login to shared service although limited function are available. Is there anyway to control other users except my users to login?
    I do not want to use Native to create user as it will means another set of password to rememberr for the users, would prefer they use their normal domain accoutn to login.
    Thanks

    In addition to other comments, users can only make changes in Shared Services if they have Shared services roles assigned. Also, we use MSAD with both local and AD groups, and as long as you know the effective rights, it works out fine either way. The Shared services roles are listed below (Security Administrator's Guide pp 135-136):
    Administrator: Provides control over all products that integrate with Shared Services. It enables more
    control over security than any other Hyperion product roles and should therefore be
    assigned sparingly. Administrators can perform all administrative tasks in User
    Management Console and can provision themselves.
    This role grants broad access to all applications registered with Shared Services. The
    Administrator role is, by default, assigned to the admin Native Directory user, which is
    the only user available after you deploy Shared Services.
    Directory Manager: Creates and manages users and groups within Native Directory.
    Do not assign to Directory Managers the Provisioning Manager role because combining
    these roles allows Directory Managers to provision themselves.
    The recommended practice is to grant one user the Directory Manager role and another
    user the Provisioning Manager role.
    LCM Manager: Runs the Artifact Life-Cycle Management utility to promote artifacts or data across product environments and operating systems
    Project Manager: Creates and manages projects within Shared Services
    Create Integrations: Creates Shared Services data integrations (the process of moving data between
    applications) using a wizard.
    For Oracle's Enterprise Performance Management Architect, creates and executes data
    synchronizations.
    Run Integrations: Views and runs Shared Services data integrations.
    For Performance Management Architect, executes data synchronizations.
    Dimension Editor ( includes Dimension Viewer and Interactive Editor):
    Creates and manages import profiles for dimension creation. Also, creates and manages
    dimensions manually within the Performance Management Architect user interface or the
    Classic Application Administration option.
    Required to access Classic Application Administration options for Financial Management
    and Planning using Web navigation.
    Dimension Viewer can read or view dimensions. This role automatically maps to the
    Dimension Reader access on dimensions.
    Interactive Editor can modify members within a dimension, and grants dimension writer
    access to all dimensions. Does not allow users to delete dimensions.
    Note: Dimension Viewer and Interactive Editor roles are reserved for future use.
    Application Creator (includes Analytic Services Application Creator, Financial Management Application Creator, Planning Application Creator,  External Application Creator): Creates and deploys Performance Management Architect applications. Users with this
    role can create applications, but can change only the dimensions to which they have
    access permissions.
    Required, in addition to the Dimension Editor role, for Financial Management and
    Planning users to be able to navigate to their product’s Classic Application Administration
    options.
    When a user with Application Creator role deploys an application from Performance
    Management Architect, that user automatically becomes the application administrator
    and provisioning manager for that application.
    The Application Creator can create all applications.
    The Analytic Services Application Creator can create Generic applications.
    The Financial Management Application Creator can create Consolidation applications
    and Performance Management Architect Generic applications. To create applications,
    the user must also be a member of the Application Creators group specified in Financial
    Management Configuration Utility.
    The Planning Application Creator can create Planning applications and Performance
    Management Architect Generic applications.
    The External Application Creator can create external views and export application views
    but cannot export the library.
    Note: External Application Creator role is reserved for future use.

  • Essbase server is invalid. Not registered with Shared Services

    Hi,
    I am trying to deploy EPMA Essbase application after we upgrade to 11.1.2.2 from 11.1.2.0. I get this error.
    Application server '<Server>:1423' is invalid. It is not registered with Shared Services.
    URI: http://<Server>/awb/integration.verifyApplication.do
    Code: com.hyperion.awb.web.common.BaseServiceException
    Description: Application server '<Server>:1423' is invalid. It is not registered with Shared Services.
    Actor: noneAny specific post configuration task needs to be performed?
    Regards,
    Ragav.

    Hi,
    We were able to resolve the issue. The "Invalid Deployment Information" test in the application diagnostics failed. We had to synchronize the deployment data and later we were able to validate the application.
    Regards,
    Ragav.

  • 'register with shared services' option missing while configuring eas

    I am facing some issues while configuring a new epm system:
    While configuring eas 11.1.2.0, I am not getting the option' Register with Shared Services'. but otherwise, the configuration is successful. As a result, I don't see the Business Rules option in Shared Services/Application Groups. But we are able to use eas console and do see business rules node in eas console.
    How do I get configurator to show this option?
    I was able to configure and register all other Hyperion applications.
    Thanks,
    Edited by: 784749 on Mar 28, 2012 12:35 PM
    Edited by: 784749 on Mar 28, 2012 12:59 PM

    One way is to use the registry tool though make sure you backup the shared services database before running the utility.
    It is located in <MIDDLEWARE_HOME>/user_projects/<instancename>/bin
    to change the status for EAS for HSS then run the following
    epmsys_registry updateproperty BUSINESS_RULES_PRODUCT/system_tasks_configuration/@hubRegistration Pending
    Now if you run the configurator again it should let you select just Essbase Administration Services, you dont need to select the child components.
    It should then registry with Shared Services.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Failure to register with Shared Services

    Planning 9.3.1 At Time = 0, we had created groups in Shared Services that were provisioned to our planning app. We could see the groups and corresponding uses come through into planning. Now at Time = 1, we notice that in Shared Services our planning app does not appear in the Planning projects folder. In Application Settings, the Shared Services URL still shows up in the Shares Services URL field, but attempting to Register with Shared Services yields the msg "Unable to Register with Shared Services".
    Note, between T=0 and T= 1, we did not do any migration or configuration changes that I'm aware of.
    Any thoughts on how to fix?
    Thanks

    I solved the problem myself. I had to unregister with Shared Services, then reregister, and then the app reappeared in the Planning projects in Shared Services. Not sure why the app go confused with Shared Services in the first place.

  • Essbase Registration With Shared Services Fails...

    Hi all,
    I have three system A, B, C in a distributive manner. A has only Oracle 11g and Essbase Server. B has Shared Services, Planning, Essbase Essbase Components, Workspace. C has EPMA, Calc Manager, Reporting Analysis. I created separate database for each components. While configuring I do the following-
    -> First on B I configured Shared Services/Common Settings with its database(1st Time). I could see the green tick.
    -> On A I configured Shared Services/Common Settings with previously configured database. I could see green tick.
    -> On A configure Essbase Server, here I get the error which shows Register with Shared Services failed.
    Examining the configtool_err.log navigate to D:\Hyperion\logs\config folder I see the following message-
    (Jun 10, 2009, 01:13:32 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Shared Services Registration task can not be executed because Shared Services instance is not available in Registry
    (Jun 10, 2009, 01:13:42 PM), com.hyperion.essbase.config.EssbaseAgentTaskProcessor, ERROR, Error in executing the script to register Essbase as a service: exitCode = 1
    I am using v11.1.1.1 on Win 2003.
    Can anyone pls help me how to solve this??
    Thanks.
    Edited by: Sap B on Jun 10, 2009 12:52 AM
    Edited by: Sap B on Jun 10, 2009 1:14 AM
    Edited by: Sap B on Jun 10, 2009 1:15 AM
    Edited by: Sap B on Jun 10, 2009 1:48 AM

    Thanks John. I was so anxious to get a response from you. See, on the machine where only Essbase Server is installed( and 11g as well), on configuration page I get two options- Hyperion Foundation and Essbase. Now Hyperion Foundation( Configure Database and Common Settings) configuration is done properly with previously configured database.
    Now in Essbase node there is Essbase and under it is Essbase Custom Configuration. when I try to configure it I get the error that Register to Shared Services failed. I could see green tick on Essbase Custom Configuration, but a red cross on Essbase.
    What needs to be done John?? Please help.
    Edited by: Sap B on Jun 10, 2009 2:06 AM
    Edited by: Sap B on Jun 10, 2009 6:22 AM

  • Register with shared services - failed

    I am trying to install EPM 11.1.1.2 and I get this error for the point "register with shared services" for every item except Essbase.
    Shared Services is running, I can connect to the Web App on localhost:28080/interop and manage users and groups but it seems that registering things with it just does not go through.
    any ideas? has someone had the same problem and solved it?
    thank you in advance for your support.
    Micha Roon

    Hi,
    Glad to hear you think the installation was a piece of cake!!
    I think you may get this error when configuring a product selecting "perform first time configuration".
    Are you using a single repository for all your products?
    Could you maybe recreate new databases, including shared services and try again?
    Seb
    www.capiotech.com

  • Is BOE 4.0 integrated with Data Services XI 4.0

    Hi,
    I have gone through some blogs and documentation on Data Services XI 4.0 and some where it is mentioned that BOE 4.0 is integrated with Data Services XI 4.0. Is it true? If it is true then i want to know how can we integrate BOE 3.1 SP2 with data services XI 4.0 because right now we are using BOE 3.1 SP2, BW 7.01 and want to install Data Services XI 4.0 unless there is no compatibility issue between them.
    I need this information immediately because we have to install data services if its compatible with BOE 3.1 SP2 and BW 7.01.

    Hi Aditya,
    From the XI 4.0 Data Services Upgrade Manual:
    2.1 Major changes in Data Services XI 4.0
    Unlike previous releases of Data Services and Data Integrator, SAP BusinessObjects Data Services
    XI 4.0 introduces central user management, which relies on SAP BusinessObjects Enterprise. Users
    are authenticated against the SAP BusinessObjects Enterprise security, and repositories are registered
    in SAP BusinessObjects Enterprise.
    You can use either an existing SAP BusinessObjects Enterprise XI 4.0 installation to manage Data
    Services users and repositories, or SAP BusinessObjects Information platform services, which is availabe
    to all Data Services customers and contains the required SAP BusinessObjects Enterprise services for
    user management.
    For information about installing SAP BusinessObjects Information platform services, see the SAP
    BusinessObjects Data Services Installation Guide.
    So it sounds like you can't use an exisiting BOE XI 3.1 CMC, but would need to upgrade it to XI 4.0 or use the SAP BusinessObjects Information platform services, which is included with XI 4.0 Data Services.

  • Unable to register Hyperion Reporting and Analysis with Shared Services

    Hello everybody,
    I'm trying to install and configure Foundation Services in order to schedule Brio Query documents execution and distribution.
    IBM DB2 Express has been installed and configured.
    Shared Services have been installed and configured.
    Reporting and Analysis - System 9 Services have been installed and not yet configured.
    Reporting and Analysis - System 9 UI Services have been installed and not yet configured.
    When proceeding with Hyperion Reporting and Analysis configuration in registering with Shared Services, provided with the same host, port, user profile and password used for configuring Shared Services, I get the following message:
    "An unknown CSS error occured.
    Please check that the information entered is correct."
    Messages from configtool.log file:
    "(Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Getting CSS instance
    (Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, URL for CSS.xml = https://itblq001.wincor-nixdorf.com:58080/interop/framework/getCSSConfigFile
    (Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, DEBUG, Authenticate LStoppa user to CSS.
    (Aug 21, 2008, 09:32:32 AM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = LStoppa"
    I can't understand what's happening. May you help me?
    Thank you for every hints.
    Regards
    Lucia

    The service runs until I try to confirm the registration while configuring HRA. Then it stops.
    Apologies for the simple question, as I am trying to make the whole Hyperion System 9 running with little knowledge of it: how do I log to shared services?
    Thanks

  • Issue with shared services - Need Urgent Help please!!

    Hello Experts
    One of my customer has installed a new instance of oracle and copied all the schemas and data over to the new instance.
    Now when they bring up shared services, have lost all our provisioning. None of the projects are recognized by shared serices and gets the following error when we try to bring up a user
    'xxxxx' is not a recognized Shared Services project. Please contact your adminstrator
    Is there something we need to do to restore Shared Services to its original state?
    Thanks in advance.
    Regards,
    Sonu
    Edited by: 637223 on Jan 20, 2009 2:19 AM

    hi,
    I doubt that "creating a new instance of oracle and copied all the schemas and data over to the new instance" will register the project with shared service and thats why giving error. Because when you install shared service, it asks you about the database name (oracle in your case) to register with. So even if you overwrite that database by new instance it gives error.
    Have you tried the configuration utilty ? Over there you can provide the new database instanse as your database and configure your shared service. Remember that you need to do a complete configuration of shared service , analytic administration services and analytic services. After configuring, Restart the system.....it should work.
    Hope this helps!
    Regards,
    James

  • Essbase not registering with Shared Services in 11.1.2.1

    During configuration Essbase is is failing on Register with Shared Services. The configuration was pretty straight forward and all defaults. I ran the diagnostic tool and it came back with connection refused. Essbase is the first (other than Shared Services connection) that I have attempted to configure on this box
    We are running an all Windows environment with four separate servers. Shared Services is running on a separate box, connection to the SQL server is working, passwords are correct, username is correct, database is correct, there are no firewalls in place and I can get to Shared Services and workspace, services are running...
    Any ideas?

    This is what is in the log:
    [2011-06-08T07:52:39.239-04:00] [EPMCFG] [ERROR] [EPMCFG-01020] [oracle.EPMCFG] [tid: 19] [ecid: 0000J1j69ueFS8A_n_G7yZ1Dvq96000003,0] [SRC_CLASS: com.hyperion.config.wizard.impl.RunAllTasks] Error: [[
    EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator$CSSTokenUtils.getTokenString(CSSAbstractAuthenticator.java:956)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.addToken(CSSAbstractAuthenticator.java:397)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateTrustedUser(CSSAbstractAuthenticator.java:497)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateProxyUser(CSSAbstractAuthenticator.java:332)
         at com.hyperion.css.facade.impl.CSSAPIImpl.authenticateProxyUser(CSSAPIImpl.java:186)
         at com.hyperion.css.facade.CSSAPIFacade.authenticateProxyUser(CSSAPIFacade.java:146)
         at com.hyperion.cis.config.CmsRegistrationUtil.<init>(CmsRegistrationUtil.java:107)
         at com.hyperion.config.wizard.impl.RunAllTasks.executeHubRegistrationTask(RunAllTasks.java:656)
         at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:515)
         at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:90)
         at java.lang.Thread.run(Thread.java:619)
    Nested Exception:
    EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.
         at com.hyperion.css.common.internal.CipherUtil.encrypt2(CipherUtil.java:318)
         at com.hyperion.css.common.internal.CipherUtil.encryptToken(CipherUtil.java:165)
         at com.hyperion.css.facade.impl.CSSTokenHelper.getToken(CSSTokenHelper.java:169)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator$CSSTokenUtils.getTokenString(CSSAbstractAuthenticator.java:954)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.addToken(CSSAbstractAuthenticator.java:397)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateTrustedUser(CSSAbstractAuthenticator.java:497)
         at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateProxyUser(CSSAbstractAuthenticator.java:332)
         at com.hyperion.css.facade.impl.CSSAPIImpl.authenticateProxyUser(CSSAPIImpl.java:186)
         at com.hyperion.css.facade.CSSAPIFacade.authenticateProxyUser(CSSAPIFacade.java:146)
         at com.hyperion.cis.config.CmsRegistrationUtil.<init>(CmsRegistrationUtil.java:107)
         at com.hyperion.config.wizard.impl.RunAllTasks.executeHubRegistrationTask(RunAllTasks.java:656)
         at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:515)
         at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:90)
         at java.lang.Thread.run(Thread.java:619)
    I do not have external user directories defined in Shared Services yet.... I cant even get into Shared Services because a "Failed to authenticate user. Invalid credentials." message. I checked my credentials and they cant be wrong cause I copied and pasted them.

  • Urgent: Error in registering HFM with Shared Services while configuration.

    Hi,
    I am installing HFM 11.1.2 on a 64-bit Server 2008 platform with my Foundation Services server is on different
    Machine. I have installed installed HFM client, Web Application and Services on both the server.
    But i have configured "Deploy to Application Server" on Foundation Server to have a single domain.
    All other configurations are done on the HFM Server only.
    But during to Deployment to application server my "Register with shared services" part fails.
    My foundation services are running. Do i require to Configure DCOM on foundation server also.
    Please suggest me some ways to solve this problem.
    Regards,
    Arvind

    Johan,
    you are right, now the user are given with dba priv ,
    now i am getting the below error,
    (Nov 11, 2008, 05:30:03 AM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
    com.hyperion.cis.config.ProcessingException
    at com.hyperion.ess.EASDBConfigurator.configure(EASDBConfigurator.java:252)
    at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeDBConfigTask(RunAllTasksWizardAction.java:282)
    at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:151)
    at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
    Please let me know your suggestions.
    Thanks,
    bhavani

  • Register with Shared Services 11.1.1.4 / AIX / WAS

    Hello Admins,
    I'm working on an installation of EPM Interactive reporting. The environment is AIX 6.1 with manual deployment in Websphere Application Server 6.1.
    Shared services manual deployment was successful and comes up OK.
    Moving onto the Workspace configuration tasks, the Register with Shared Services task fails. In past versions, the configuration utility would ask you the location of where Hyperion Shared Services is installed. In version 11.1.1.4 there are no options at all!
    The error is very basic, communication error--
    (Jun 21, 2012, 05:02:03 PM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, register operation failed in CMS:
    com.hyperion.interop.lib.OperationFailedException: Unable to connect to Shared Services, make sure the Shared Services server is running and try again.
    at com.hyperion.interop.lib.helper.RegistrationHelper .register(Unknown Source)
    at com.hyperion.interop.lib.CMSClient.register(Unknow n Source)
    at com.hyperion.cis.config.CmsRegistrationUtil.regist erProduct(CmsRegistrationUtil.java:142)
    at com.hyperion.cis.config.wizard.RunAllTasksWizardAc tion.executeHubRegistrationTask(RunAllTasksWizardActio n.java:477)
    at com.hyperion.cis.config.wizard.RunAllTasksWizardAc tion.execute(RunAllTasksWizardAction.java:258)
    at com.installshield.wizard.RunnableWizardBeanContext .run(Unknown Source)
    Has anyone run into this before? Is there a way to manually register other products with Shared Services?
    Thanks for any help!

    Exactly!
    I was hoping there was a manual method to force the registration with shared services. Since the configuration tool doesn't ASK you where SS is installed it must be pulling this information from somewhere, perhaps that could be manipulated?
    Edited by: edubs11 on Jun 22, 2012 10:07 AM

  • Registration of Workspace with Shared Services failed

    OS: Linux
    Hyp Version: 11.1.1.3
    Application Server: Weblogic 923
    We are installing them on new servers. Shared Services was configured and deployed to Weblogic successfully. When a telnet test is done on localhost 28080, it indicates that it is listening. Start up log from Shared Services indicates that Weblogic is listening on port 28080.
    From my understanding and also based on confirmation from Support, the service cannot be accessed from a browser on desktop - because Workspace is yet to be configured and it defines how to use Apache http server to connect to Shared Services.
    So, we started Shared Services, confirmed as above and then configured Workspace. It succeeded in the 3 configuration steps: "configure database", "deploy to application server", "configure web server"; and it fails in the step: "register with shared services".
    Any thoughts?

    We are receiving an exception when Shared Services is started up.
    Exception in thread "Thread-12" java.lang.NullPointerException
    at com.hyperion.eie.common.cms.CMSFacade.getNamespaceConfig(Unknown Source)
    at com.hyperion.eie.common.cms.CMSFacade.getProducts(Unknown Source)
    at com.hyperion.eie.common.cms.CMSFacade.getRegisteredProducts(Unknown Source)
    at com.hyperion.cas.server.CASAppRegistrationHandler.loadApplicationsFromCMS(CASAppRegistrationHandler.java:337)
    at com.hyperion.cas.server.CASAppCacheLoader.run(CASAppCacheLoader.java:39)
    Support is checking on that.
    Meanwhile, we are also checking internally if anything is blocking communication to port 28080 on the server. Telnet <hostname> 28080 from a different computer is responding with the message "No route to host" - similar to browser message.
    Will post updates to this thread.

Maybe you are looking for