Migration to Shared Services

Has anyone had much luck migrating security to shared services? Or have you had to just recreate your security in the new system? We're trying to migrate from Hyperion 7.1(Essbase, Analyzer, Intelligence) to Oracle EPM 11G and are running into some issues with groups and provisioning. Nothing specific, I'm just wondering if it would be easierto just recreate our system and if anyone has run into similar issues.

There is a utility under cssimportexport utility under Hyperion/Commom/Utilities.This should be of some help when migrating users/groups provisioning.

Similar Messages

CSSimport.bat error: while migrating the Shared Services groups and users

Hi,
I am trying to migrate the shared services native users and group from 9.3.1(on server A) to 11.1.1.3(on server B)
- I have taken the export in CSV format from 9.3.1 using CSSexport.bat.(export.csv) -Successful.
- I have copied this on the 11.1.1.3 server and changed lil details like removing the admin user etc.
- When I am trying the import this on 11.1.1.3, I am getting the below error:
CSSimport importexport.properties2010-10-11 09:36:41,328 Attempting a import operation
log4j:WARN No appenders could be found for logger (com.hyperion.css.common.CSSLogger).
log4j:WARN Please initialize the log4j system properly.
null
Aborting program...
- There are not log or error files geting generated - The only error recieved , is given above.
- I have made the necessary changes to the impotexport.properties file on 11.1.1.3 before starting the CSSimport utility.
Can you please let meknow what should I do to overcome this error.
-thanks,
Ankit

First thing I would try would be on the 11.1.1.3, try and run an export, if it works then run the import on the same file, this way you will make sure you have the version 11 utility working.
Once you have done that then you can move on to the 9.3.1 export file.
Cheers
John
http://john-goodwin.blogspot.com/

Migration of Shared Services.

Hi Gurus,
I want to migrate the shared services from Dev to Test. I have setup the Test land scape with Shared Services and HFM and FDM. I need to move the Shared Services of Dev to newly created Test. I search over this forums and it was recommended to use LCM.
http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_lifecycle_management/frameset.htm?ch06s03.htm
In oder to completely migrage the Shared Services, HFM, FDM what all steps I need to perform at Source and Target. Lets see first I want to move the shared services then how can I use this utility to migrate the Shared Services. Any exmaple / doc or step will be very helpful. This is the first time I will be performing this operation so I am seeking the help from the experts.
Thanks
Shashi

There is a pdf document with the CSSImportExport utility, it should be provide you with enough information.
All it takes is to put a little bit of effort in as everything is there that you need.
It is probably easier to attempt the LCM route.
Cheers
John
http://john-goodwin.blogspot.com/

Migration and Shared Services

Currently thinking about migrating two cubes: one in version 6 and one in version 7 to 11.1.2. Here are the steps I am considering following:
- Recreated the applications in EAS version 11.1.2.
- Copy over .otl, .rul, .csc etc files.
- The .cfg files in 11.1.2 - not sure what to do about this one. Do they have to be the same as in the previous versions? What do I do about the configuration settings that have changed from the old versions to new versions.
- Security. Version 6 and 7 dont have shared services. So does security have to be recreated from scratch?
I found a wealth of info on migrations on these forums, but these two particular questions evaded me.

For security have a look at the Advanced security manager, free tool :- http://www.appliedolap.com/free-tools/advanced-security-manager
Failing that you could look at extracting the security information using maxl/esscmd then pushing it into 11.1.2 using maxl or LCM
Cheers
John
http://john-goodwin.blogspot.com/

Migrating Shared Services

Hi all,
Is there a utility/tool to migrate Hyperion Shared Services 9.3.1 from one server to the other?
Thanks,
Manoj

Hi,
You can use the css import export utility to export all the provisioning from HSS and then import it into your target HSS
Have a look in \Hyperion\common\utilities\CSSImportExportUtility there will be a zip file, unzip and there is a document with instructions on how to use it.
Cheers
John
http://john-goodwin.blogspot.com/

Migration of IDs to shared services

Hi
I successfully migrated the HFM application 9.2.1 to 11.1.1.4. then i want to migrate the shared services users and group... more than 50 users are there in the shared services..
so please advice me what are the step i follow to migrate the shared services users
thanks

It might be easier just to recreate the 50 users.
However, the approach is to use the CSSImport/Export tool to extract the users/provisioning from 9.2
The output format would be .csv files
Then in the new 11 system you can do an LCM export of Foundation (users,groups, assigned roles) with a couple of test users provisioned to HFM.
The LCM tool for provisioning and users is basically the CSSImport/Export tool wrapped into a web interface.
Compare the output of both the 9.2 and the 11 , they should be similar.
Manipulate the 9.2 content to fit the new 11 format and try to LCM import...
Nick
Edited by: Nicholas King on Jan 9, 2012 7:54 PM

Reg: Hyperion Upgradation from 7.1.x to 9.3.x and Shared Services...

Hi Everybody,
New to this forum and i want to know about upgrading the essbase from 7.1.x to 9.3.x...As i gone through PDF, it is mentioning as upgrading of 9.3.x from earlier versions prior to release 9.2.x cannot be done directly...Here comes with the migration/upgradation topic wherein... Can we go ahead and install essbase 9.3.x on new box and migrate app's / db's from 7.1.x old box?
One more thing is like...if we are using External authentication using LDAP in 7.1.x version for security....will it be mandatory to implement shared services separately in system 9 or continue with native security mode without installing shared services...I have only essbase and no other tools implemented...
Hope u guys understand my queries!...If any body can explain on these two aspects...will be of great help to me...
Thanks for the help in advance!!

Hi,
You will have to migrate the Essbase server from 7.1.2 to 9.3.1
The steps you will follow are as below: --
1. Configure Essbase on new environment, 9.3.1 by using the same user as on 7.1.2 [THIS IS AN IMPORTANT STEP, TO MIGRATE SECURITY]
1. Take data exports of all application/databases in old environment
2. Take backups of all Essbase objects, including essbase.sec in old environment. Take security file backup after stopping Essbase 7.1.2
3. Create the applications/databases with same name in new environment 9.3.1
4. Copy the outlines and open outline in EAS in 9.3.1 and save them again.
5. Copy all objects, rules, reports, calc for all applications.
6. Stop essbase, Eas in new environment and copy security file from old environment to new environment Take backup of Essbase.sec on new environment
7. Start Essbase 9.3.1
8. Validate all databases using Esscmd "validate" command
9. Reimport all data and run default calc on all applications.
10. Now, you have the security in new Essbase server, as in old environment
11. Externalize the security in EAS.
Caution: When you migrate to Shared Services, Essbase users and groups are converted to equivalent roles
in Shared Services. Shared Services creates a superuser with the user ID named “admin,” which
is read-only. If Essbase contains a user ID named “admin”, that user ID cannot be migrated to
Shared Services. Before migrating, change the “admin” user ID (for example, from “admin” to
“asadmin”).
It is not compulsory to use shared services with Essbase 9.3.1, if you have Essbase only.
but since it the way to go, you will have to migrate your essbase security to shared services.
Let me know if it helps, by defining the reply as answered, Helpful or correct.
Cheers
RS

Shared Services Configuration Error

Hi,
I have installed Shared Services and also configured it. Then register AAS and Essbase with SS successfully.
Also externized AAS users. But when I am externizing Essbase users it is giving me following error: -
Error: 1051549: Can not convert Analytic Services to Shared Services mode when Analytic Services is not configured with Shared Services or the initialization process has failed
Please help me on it.
Atul K,

Hi Atul,
Could you tell me how u resolved your issue?
I have Essbase 11.1.1.2 installed on OEL 4 and am trying to migrate to shared services security mode. But i faced this
Error 1051549 : Can not convert Analytic Services to Shared Services mode when Analytic Services is not configured with Shared Services or the initialization process has failed
Do I need run the configuration utility again ? will this remove all the existing cubes from the analytic server ?
Thanks in advance.

Issue externalizing the Essbase security to shared services

Guys,
I am facing an issue while externalizing the security to shared services in Hyperion Essbase 9.3.1. When i tried to externalize the users in Essbase 9.3.1, i am getting the error
"Error: 1051400: Analytic Services has already been migrated to Shared Services Mode". But i dont see any options when i right click on the security tab. i am seeing the same options
as we have before migrating to shared services like Externalize Users. Also when i tried to create a user in Essbase, it is giving the following error msg.
"Error: 1051484 Cannot change CSS Authenticated User to Another Authentication Type After successfully migrating that user to Shared Services". Errors are showing my security is in shared
services mode. How i can test if it is really in shared services security mode.
One other thing is, when we installed Essbase, we used 'admin', 'password' as user credentials. Does these have anything to do, as i saw in one thread that 'admin' is not recommended for Essbase while configuring shared services.
Thanks in advance
PM

Forget this thread. I am able to rectify the issue. We forgot to give access to temp folder of EAS Console.

Active / Inactive Users on Shared Services

Hi All,
I have been trying to migrate Hyperion Shared Services 9.3.1 to 9.3.3
Now, once the migration has been successful, I try to log back using the Native User credentials.
However, it fails, and I log in as an MSAD user.
Now, once logged inside, I view Users i.e. User Directories -> Native Directories -> Users
I right click on Users select Show All and observe that all my 9.3.1 Users are visible in this pane, but are not displaying in the Active or in the Inactive Window Pane.
Now, does it imply that these users are Inactive, if yes, then why are they not a part of the Inactive Directory?
Kindly advise.
Thanks!
Apo

I find out.
I did not know that privacy was on by default.
I just had to turn it off to be able to see this informations again.
Thanks

Reg. shared services

Hi..
I have not worked in shared services..i have gone through the dbag and a bit confused ..my question is
why do we go for shared services security mode?...we have users in external system and why do we migrate them as well..
after migrating to shared services we have something like essbase security and shared services secuirty which needs to be in sync..can anyone give some detail..?
Thanks in advance
Ram

Shared services is there to centrally manage users/groups and provisioning across the hyperion EPM product set.
Before 11.1.2 you need to sync shared services to essbase, this pushes down the provisioning from shared services to essbase.
You can use external authentication with shared services.
You don't have to convert you could always use essbase in standalone mode.
Cheers
John
http://john-goodwin.blogspot.com/

Getting the communicatin error in Shared services

In the shared service i am using the ladap account i am trying to access control to the one application in the assign access tab but i am getting the communication error
Communication Error : http://localhost:19000/hfm/security//getRights.asp <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator,
[email protected] and inform them of the time the error occurred,
and anything you might have done that may have
caused the error.</p>
<p>More information about this error may be available
in the server error log.</p>
</body></html>

Thanks for your response. i am using Hyperion 11.1.1.4, 32 bit win2008 server and weblogic 9.2 and appache 2.0.61.
last week i migrated the hfm application successfully from 9.2.1 to 11.1.1.4 the i tried the migrate the shared services users there are using ldap concept.
first i used the native directory users and select the one users and assign the provisions its working fine.
And then i implemented the ldap and the all the users are listed out in ldap groups and i select the one users (ldap) in through application groups to assign the application access. and i am getting above error
Thanks
Kimi
Edited by: Kimi on Jan 27, 2012 12:02 PM

Migrating shared services registry from version 9 to version 11.1.1.3

Good day all,
I'm currently doing a migration of Hyperion Shared Services from version 9.3 to version 11.1.1.3 on different servers. Right now, I have imported the users, groups, and the roles from version 9 to version 11, but I'm having troubles migrating its registry.
Could you please guide me on where to start on this process?
Thank you very much.
Edited by: 26FEB1986 on May 18, 2011 5:59 AM

Dude,
You may possibly get by using LifeCycle Managment. Have you tried that?
http://www.artofbi.com/index.php/2009/08/hyperion-11-lifecycle-management-lcm-in-action-part-1/
You may have to tweak the resulting output files a bit for version 9 vs 11 but this would give you a good starting place.
Please award points if that helps.

Hyperion Shared services Migration/Export import

Hi, We are migrating the OS from Windows to UNIX in Essbase System 9. I am trying to export the exixting grous/filter access from the Windows environment (shared services--Single sign on) to the unix server. There are several cubes in the Windows, but I am tryign with only a single cube. as a part of that I have modified importexport.properties file
#import export operations
importexport.css=http://windows_server:58080/interop/framework/getCSSConfigFile
importexport.cmshost=windowsserver
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=D:\trace_19Nov.log
importexport.errors.log.file=D:\errors_19Nov.log
importexport.locale=en
# importexport.ssl_enabled = true
# export operations
export.fileformat=xml
export.file=D:\export.xml
export.internal.identities=false
export.native.user.passwords=true
export.provisioning.all=false
export.delegated.lists=true
export.user.filter=*
export.group.filter=*
#export.role.filter=*
export.producttype=HUB-9.3.1,ESBAPP-9.3.1
export.provisioning.apps=(Analytic Servers:server:1=DlyCube)
# import operations
#import.fileformat=xml
#import.file=C:\exportNew.xml
#import.operation=update
#import.failed.operations.file=c:/failed.xml
#import.maxerrors=0
I am not gettign any export error; it says 50 groups have been exported,
my import is
importexport.css=http://fbiapld06.uk.db.com:58080/interop/framework/getCSSConfigFile
importexport.cmshost=fbiapld06.uk.db.com
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=/apps/hyperion_data/trace.log
importexport.errors.log.file=/apps/hyperion_data/errors.log
importexport.locale=en
importexport.ssl_enabled=false
import.fileformat=xml
import.file=/apps/hyperion_data/import.xml
import.operation=CREATE/UPDATE
import.failed.operations.file=/apps/hyperion_data/failed.xml
import.maxerrors=10
While importing also i am not getting any error, it sayd 50 groups have been imported successfully.
but in shared server unix box, i can't see the groups for that applicaiton.
can u please help me?

You can call CSSEXPORT.bat script using following statement
Call CSSExport.bat importexport.properties
Make sure your importexport.properties file is present in the same location as CSSExport.bat files
format of importexport.properties file needs to like this
Send me your email id and I can send you a document on import/export utlity for version 9.3.1
#import export operations
importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/
config/CSS.xml
importexport.cmshost=localhost
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=trace.log
importexport.errors.log.file=errors.log
Import/Export Utility 3
importexport.locale=en
# importexport.ssl_enabled = true
# export operations
export.fileformat=xml
export.file=C:/exportNew.xml
export.internal.identities=true
export.native.user.passwords=true
export.provisioning.all=true
export.delegated.lists=false
export.user.filter=*@Native Directory
export.group.filter=*@Native Directory
export.role.filter=*
export.producttype=HUB-9.2.0
#export.provisioning.apps=(HUB=Global Roles)
# import operations
import.fileformat=xml
import.file=C:/exportNew.xml
import.operation=update
import.failed.operations.file=c:/failed.xml
import.maxerrors=0

LCM Migration - Instance name? Shared services project Name ? Data source?

Situation
* We have hyperion 11.1.1.3.24
* Objective - trying to perform a LCM file-migration from our DEV environment to UAT
* DEV has only one PMA enabled Planning Application (“budget”), few FR reports & other related artifacts.
So far
* Successfully Exported these 4 (EPMA, Shared-services, Planning & FR) from our DEV
* When trying to import EPMA into our UAT, noticed the status shows Failed. (Noticed Similar claims have been reported in other posts as well.)
Another dilemma that I have it what should I enter on these Instance Name, Shared services Project name & Data source.
* Instance Name ===> ? Not sure. how to find this?
* Shared services project ===> Haven't created one at all. So, which one should I use OR how to find this out ?
* Data Source ===> I guess, this would be the EPMA repository database name ?
Although I can Migrate all the Artifacts into our UAT (as identical to our DEV), Migration status has shown as "Failed". Is this because of the fact I skipped the Destination options with blank values (for Instance, shared-services & data-source). Has anyone ever had success on this Migration step.
OR Should I disregard this migration status, just because we can see all identical artifacts in our UAT.
Any help would be greatly appreciated.

If you log into EPMA and pick an application and select deploy (don't worry you don't have to deploy you can cancel it before you do so),
it will display a popup which will have the
Instance Name (usually default), Shared Services Project (drop down will display different application groups available), Data Source (this is the name you gave when you created the datasource for the application)
Cheers
John
http://john-goodwin.blogspot.com/

Migration to Shared Services

Similar Messages

Maybe you are looking for