Migrate Essbase 11.1.2.2 to Shared Services Security

Can anyone point me at a useful guide for this?
thanks,
Robert.

Try - http://docs.oracle.com/cd/E17236_01/epm.1112/eas_help/sec_mode.html
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

How can Manage Permissions for DB in Shared Services Security Mode

In shared services security mode, after provisioning users for Essbase applications, only can assign database calculation and filter access. How can I grant permissions "Access Databases" like in native mode?

Essbase will be default be in shared services security mode in 11.1.2, the wizard will not migrate security when in this mode.
It is possible to revert it back but if you don't know the process then it is worth looking at alternatives first.
You could use LCM to export the provisioning and then import into your target environment.
Cheers
John
http://john-goodwin.blogspot.com/

Auto Logoff while in Shared Services Security Mode

Pretty simple question but I still haven't found the answer.
My client's essbase server is set up in Shared Services Security Mode, so now the auto logoff options for the server don't apply. Is there a way to set this via shared services? Or is there some other means perhaps?
Thanks for your time.

Essbase will be default be in shared services security mode in 11.1.2, the wizard will not migrate security when in this mode.
It is possible to revert it back but if you don't know the process then it is worth looking at alternatives first.
You could use LCM to export the provisioning and then import into your target environment.
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services Security during LCM migration in 11.1.2.1

I am migrating a Planning app from 1 environment to another.
I vaguely remember ( from some presentation) that once I export Shared service security I need to modify the file to reflect the correct Essbase server name and than import the Shared service security file.
Is this a mandatory step ? If yes which file should I modify ? Is it just listing.xml or any other file as well ?

If you run an export of provisioning then for essbase you should by default see something like "EssbaseCluster-1", if your target environment is configured in the same way it should also be "EssbaseCluster-1" and you will not need to edit any files.
If you don't start marking your posts I am not going to reply to any of your questions in future, hopefully everybody else will take that stance seeing as you have so many unresolved questions.
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services Security Migration

Hi All,
I need to migrate Shared Services Security from one server to another server(applications already migrated).
Can you please let me know if we copy essbase.sec file will it work, or any other process we need to follow.
Thanks,
Pinky

Dear Pinky,
As John just mentioned - it depends a bit on the version that you use as well (11.1.2 is different from 11.1.1.3.x is different from 9.x)
but you may find useful information in these guides:
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security.pdf
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_backup_recovery.pdf
The CSSImportExport utiity is documented within its own zip folder on your installation of HSS (if you are using version 11.1.1.x)
Basically you can think of the process as a backup and restore on a different machine.
The complete list of steps is way too detailed and complex and touches too many sensitive areas to handle it in a thread here.
(especially as I do not know the versions of HSS/Essbase, the OS or the scope of this migration)
best regards
Torben

Shared services security and essbase security

recently upgraded to sys 9 and now use shared services 931
we used to have security at essbase level previously and now its all Shared services..
now i have so many concerns
Can we automate the security just like I used to automate in essbase earlier...
or can we automate secuirty in essbase and them sync it to Shared services??
I know that we change security settings in SS and then sync it to essbase but is the other way around possible???
IF yes HOW?
IF NOT - can we automate SS security which reflects to essbase...
I have to go through the prod doc and I'll do that very soon but any suggestion on this would really help me out..
Thanks in advance

Hi,
can you please write more about which products and version are you using and on which operating system name and version.
Why do you use Shared Services? Are you using only Essbase server or any other server? If you use only Essbase server there is probably no need of using Shared Services.
If you need only Essbase you can see my info about installing Essbase without Shared Services: hyperion essbase installation
Please provide more info, so that we on forum can help you.
Regards,
Grofaty

Shared services security- Is this even possible?

I want to know if the following is possible using shared services security:
I want to set up an MSAD group that will have say 50 sub groups.
I will define this super group as an external directory in SS.
I will then assign security (both roles and filters) to each of the 50 sub groups.
There will be no groups or users in the native directory.
Based on user needs, the MSAD team will move users from one subgroup to another without logging into Shared Services.
My expectation is when they move the users from one subgroup to another, the user will have the security of the group they were moved to.
Is it possible to set up security this way in shared services? I have been experimenting and having a miserable time getting it to work. So just wanted to know if I am doing something wrong or just wasting my time.

I think this will work, but note that you are not really using SS inherited security.
What you might do is something like this:
MasterGroup <--Assign provisioning here
|_Subgroup1 <--Assign filter
|_Subgroup2 <--Assign yet another filter
|_Etc.
With the above layout you define provisioning roles once at the topmost group (MasterGroup) and then assign unique security at the subgroups. The users are in the subgroups and their usernames will go to their ids (which will have no provisioning), then their immediate group (ditto), and then the parent group (which will).
What you have defined for security (as opposed to provisioning) sounds good to me although I have never tried to do this with MSAD groups. I don't see a reason for it not to work.
Regards,
Cameron Lackpour

Integrate active directory with Planning/ Essbase shared services security

Hi All,
we try to set up MSAD integration for Planning and Essbase 9.3.1.
Everyting works fine but the accounts that pop up are first and last name in the user field instead of the userid used in windows to login. so in windows i login with mroest but now in Hyperion i have to use Marc Roest.
DC=NL, DC=xxxx, DC=Corp
ID Attribute = ObjectGUID
User DN: CN=Adm Hyperion, OU=xxxx, OU=Utr
Can anyone please help how to use the samID as defined in MSAD instead of the full name as is now?
Thanks very much in advance,
Marc

Hi John.
Do you know why OpenLDAP database would not migrate to the unique identity attribute say if I use sAMAccountName for the ID Attribute field on the MSAD User Configuration screen in Shared Service? It will not update the identity in OpenLDAP when I browse it, even after all the services have been restarted, including OpenLDAP and Shared Services...
Any help would be appreciated.
Thanks
.-a furstrated programmer...

Essbase server does no appear in Shared Services

Hi All,
I've installed and set an EPM 11.1.2.2 environment under Win 2008 server with Oracle 11g database. I've installed and configurated Essbase Server, EAS, Essbase Stdudio, APS and EIS. But when I open up shared services the Analytic Server does not appear in Application Group and into EAS I'm getting :
Error: 104: Invalid user name or password
Error: 1051012: User native://DN=cn=911,ou=People,dc=css,dc=hyperion,dc=com?USER does not exist
I know the second error is because the admin user is not provided to the Essbase server, but it does no appear there.
Does someone could help me on that ?
Thanks

John -
Obviously several months later now, but just want to say thank you as well - I was having the exact same issue as the original poster (Essbase Server missing from Shared Services, credential error from EAS, etc). Your solution worked perfectly for me as well. That you for this solution.
John W.

Grant the Essbase application permission to user in Shared Services

Hi,
We got a problem in granting the Essbase permission to user using Shared Services. We are using Hyperion 9.3.1.
(1) We created an Essbase application + database through Essbase Administration Console, say TBC.Sales.
(2) Provision the Essbase "Server Access" + Essbase Application "Read" roles to a user.
(3) In Essbase Admin Console, we "Refresh Security from Shared Services".
However, the user still cannot see the Essbase Database in SmartView. Does anyone know how to fix the problem?

The problem is fixed with Essbase 9.3.1.3.0.5.

Essbase drillback to FDM - Error: 2067 - Shared Services Provisioning

Working with EPM 11.1.1.3. Trying to get Essbase Studio to drillback to FDM. Getting the following error:
Error: An error occurred logging on to the system using single sign-on. Please contact your administrator:
Error: 2067 - You do not have access to the application!
I've reviewed and re-reviewed FDM setup, DCOM config, and Shared Service provisioning. Everything appears correct. Including Provisioning FDM Users using Shared Services:
http://download.oracle.com/docs/cd/E12825_01/epm.111/fdm_config_help/frameset.htm?ch10s02.html
Anyone else run in to this? Any solutions?
Thanks,
Bob

Hi,
I am facing the same issue.
Can you please list down your solution in stepwise manner.It would be of great help.
Thank You!

Shared Services Security information not updating in Essbase

Hi,
I have created few users in Shared Services and performed the sync operation. Created users are not reflecting in Essbase server. why?
Also tried by externalizing the users... performed sync from shared services and refreshed the shared security from EAS console...then also... user information not updating in Essbase?
What could be the reason?

Have you provided Essbase application access rights to those users in shared services?
If not, then try after providing Essbase access to users. This might be the reason for your issue.
Regards,
NitinGupta

New Essbase install - fail at "Register with Shared services

Hi all,
I'm configuring up a new LINUX ( Redhat ) server to run Essbase 11.1 and the installation fails at the point where, in the configtool (using this in GUI mode not command line ) it's registering the components with Shared Services. In the configtool logs file I see:
(Jul 20, 2010, 02:47:19 PM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = admin
(Jul 20, 2010, 02:47:19 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
Error Code: -1
com.hyperion.css.common.configuration.CSSConfigurationException: 20:3008:Failed to connect to native directory. Error Code: 9
On a previous install, I had exactly the same problem, and this was resolved by increased the number of processes on the Oracle XE instance that the shared services was using. However we already tried that and its not the problem. All processes seem to start up OK and if I browse to http://server:28080/interop it gives me the EPM web page, but if I select "Launch Appliction" it opens another window with a error "An error was encountered while performing this operation".
I've tried reinstalling, dropping the HSS schema, stop starting all services and mixtures of all but to no avail.
Can anyone advise.
Thanks

Just for info, the we don't have any form of "admin" user that is used anywhere so we're not sure where this is coming from.

Essbase - Shared Services security problem

In a Shared services enabled Essbase server,
For a user/group can we define different access levels (say Read on one & Write on the other) to different databases belonging to the same application (BSO)?
If not, Is there any alternative?
Appreciate your thoughts.
Thanks,
Ethan.

Of course you can.
If you're on v11, the steps are as follows:
1) Create a group (I am going to assume groups and usernames).
2) Provision the group Essbase server access and Read access to My Very Favorite Essbase Database In The Whole Wide World (MVFEDITWWW) -- Sample.Basic. You could get fancy and create a two level group hierachy with the upper level group provisioned ot Essbase server access and the second group Read access to Sample.Basic if you wanted to.
3) Expand the application groups and drill into Sample. Right click on Sample and pick Assign Access Control.
4) An Application tab will open up with a Database drop down. Select Basic and check off the box that relates to your group. It will have the role of Read.
You have just assigned access to Sample.Basic.
Follow the same steps for Sample.Intl, etc., etc.
Regards,
Cameron Lackpour
P.S. I believe the above holds true for 9.3.1 but the interface looks a little different. I never did it there -- all of my System 9 work was, alas, Planning only.

Essbase - Shared services security , User provison

Hi,
I am new to 11.1.1.2 Hyperion version.(worked on 9.3.1) I have some doubts on the user security in 11 version.
We have Distribution environment setup like Essbase on linux and remainng applications on windows 2003 server. Essbase is also registerd with shared services. Here are my questions.
1. If I change the Shared services Admin password (default password) will it effects any other applications?
*2. How to change essbase admin password (default password)?(from foreground we can change first time only)*
3. I am trying to login into EAS as well as essbase admin user but under essbase I am not able to create New User. The Create users option on security is disabled seems like already externalised. I am not able to get those users who are created in shared services evnthought using Refresh from Shared servcies+ option in essbase.
4. If I want to a user with only essbase applicatons provisioned what is the procedure.
Here i followed the procedure. Created xyz user in shared services and provisioned Only Demo applications. trying to loing EAS with xyz credentials login successfull and prompted for essbase credentials with server name , username (Extername authentication) getting failed. If i provide admin password at essbase server leverl i am able to connect and see all applications.
Please help me on this...
Regards
PrakashV

Hi,
Is it the base install of 9.3.1 or is it a later version like 9.3.1.3
I know there have been a number of security issues being addressed since the base version.
e.g.
Security. Users are not de-provisioned properly, causing Essbase applications to remain accessible to
them. [7197541]
Cheers
John
http://john-goodwin.blogspot.com/

Migrate Essbase 11.1.2.2 to Shared Services Security

Similar Messages

Maybe you are looking for