Oracle EPM (Hyperion) Admin login with only few privileges

Hi,
I need to create a separate login for admin with less permissions.
As of now admin user can delete or create any folder in the workspace. Hence, i need to restrict this permission.
Kindly check and let me know how to create a new user.

John,
ExIm utility must be invoked from some sort of hyperion home. Or atleast somthing needs to be installed on the invoking machine and that seems to be difficult proposition as we will need to maintain some binaries on other systems. Also if we allow them to invoke it on the EPM infrastructure some sort of SSH invocation needs to be enabled. It hits compliance issues..
Automation if thorougly encapsulated from the invoking system can be achieved it will be ideal. Like Autosys or Peoplesoft Process Scheduler and I can think of some packaging of jar files or maxl generated from the other systems.
Also for ExIm complex ETL must be done to generate that import file with different definition (entire file is not csv...multiple sections etc..)
Any thoughts.
Ajeet

Similar Messages

  • Oracle OBIEE and Oracle EPM (Hyperion)

    We are planning to upgrade Hyperion EPM version 9.3.3 to the latest verison but we also purchased OBIEE, and Oracle (Hyperion) Planning. I am wondering if anyone has done this and how they all integrate together. My understanding is we have to upgrade from 9.3.3 to Oracle EPM 11.1.2.x and then to 11.1.4.x. Oracle (Hyperion Planning) would be intregated into Oracle EPM 11.1.4. How does OBIEE fit in and where are the integration points?
    I am trying to keep the administration to the minimum as well as plan for the future upgrades as weel. Is there any Oracle documenation on this? Has any one done this yet?

    You can integrate EPM with OBIEE but as far as I know there are specific versions that can be integrated.

  • Oracle EPM 11.1.2.3: Only R&A Administrator Can Open IR Documents

    Windows 2008 R2, SQL Server 2008 R2
    I am trying to use a test user to test for problems in a new maintenance release from 11.1.2.1 to 11.1.2.3. My test user was not provisioned individually, just using WORLD for roles. WORLD is in these roles:
    Analyst
    Dynamic Viewer
    Explorer
    IR HTML Viewer
    IR WebClient Viewer
    Interactive Reporting Viewer
    The test user was unable to open IR documents, so I began modifying the user's provisioning. If I put the user in the Reporting and Analysis Administrator role, I can open IR documents. If I remove the Reporting and Analysis Administrator role and add the Content Manager and Schedule Manager roles to the user's provisioning, I can't open IR documents.
    I remember the 11.1.2.1 documentation had a one-liner (in the thousands of pages of docs) about how security changes had been made that prevented users from opening IR documents (and how to fix it). I haven't yet found the documentation about this for 11.1.2.3. If you know how to make this work properly, please share.

    Apparently 11.1.2.3 has the same problem 11.1.2.1 had.  Support said (and it worked):
    1. Stop EPM services.
    2. Backup the table V8_CSS_ROLE
    3. Execute the following SQL queries against Reporting & Analysis relational database:
    update V8_CSS_ROLE set ROLE_ID='0000011ed1cf2e7a-0000-4dc0-0a8f1415' where CSS_IDENTITY='native://DN=cn=HAVA:0000011ed1cf2e7a-0000-4dc0-0a8f1415,ou=HAVA,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE';
    update V8_CSS_ROLE set ROLE_ID='0000011ed1cd5c8f-0000-4dc0-0a8f1415' where CSS_IDENTITY='native://DN=cn=HAVA:0000011ed1cd5c8f-0000-4dc0-0a8f1415,ou=HAVA, ou=Roles,dc=css,dc=hyperion,dc=com?ROLE';
    4. Start EPM services.

  • The best LINUX for OBIEE, ODI, EPM (Hyperion)

    Hi Experts,
    I am currently working on OBIEE and I would like to learn about ODI and EPM(Hyperion). Along with this i would like to work on Linux OS. Which flavor of Linux would be perfect for the above?? I am beginner of Linux OS.
    Thanks,
    -N-

    @obiee N co. 10 GB available disk space is a minimum (3.5 GB for the Oracle software + 1.5 GB for the database + 3 GB for OEL5 + 2 GB swap)
    @rnm, It's just a question of training.
    As beginner when I compare an OBIEE installation between Windows and Linux, I still like the simplicity fo Windows.
    I'm not in the step, the more I use it, the more I like it.
    I face some issues with OBIEE that I find on Linux but not on Windows. Specifically, If you take OC4J.
    For instance with BIP, in the last version, just start a big work and the OC4J process take all the CPU. Sure, I miss a configuration...
    Good weekend
    I must go.
    Nico

  • Problem:Member is Read only Mode after login with other user

    Dear,
    I am facing problem to enter the data in member. i.e Read only. but same member is fine with login with admin user.
    I also assign the security with write permission to user. but the only that member "X" is in read only mode..
    Is task list can effect on that??? as i am also using task list. Becoz when i add another member that is not member of that hirechiary its fine.
    I am working on hyperion version 11.1.2.1..
    Regards,
    AMSI

    Thanks, Problem has been solved myself becoz when i add new member in the form as this form is already part of Planning Unit Hierarchy , that's why the newly added member in the form can't be write only till up to when u add this member into Planning Unit Hierarchy.
    Regards,
    AMSI

  • Mac Mini Snow Leopard Server - can't login with admin account

    SO....i was having problems setting up network accounts from my mac Mini Server. I took it to the Apple Genius bar one night after work to get some help on why the login screen appears for Other..but could not login into any of the accounts I created.
    They made an appt for me for the next morning since they had a "guy" that could help the next morning.
    When I got there for my second appt..they said they don't support server issues. Only consumer products..I though the server WAS and i WAS a consumer of their products..so..they gave me a number of a consultant..of course..for pay...
    So later that day I was trying some other configurations....the power came out while I was checking a monitor cable..and when I restarted I couldn't login to the master admin account.
    Since mac mini server doesn't have a DVD drive..you have to boot up with their Server DVD from another computer and the Server installs it through airport.
    So I did the boot up via airport from the server install DVD.
    Did the Utility disk repair AND password changed. Got some error about not being to able to login if I don't change the keychains to the account.
    Rebooted the server.
    It didn't work.
    So now stuck with a login window..and NO ACCESS to change anything.
    HELP!!!!

    You can access to system with root account.
    If you didn't enable before, boot from SLS DVD and activate from menu (after choose language).
    After that, reset all the passwords (there is a menu to do that).
    After that exit from installer and reboot.
    At login screen you can try to login with your user and new/blank password.
    If it fails, you have to login with user root and the password you choose before.
    With root user, you can access to all system, be very carefull.
    Now you can create a new user and import all the files (you have to do a little work with permissions)
    I hope i help you!

  • Oracle EPM 11.1.2 issue with system-jazn-data.xml & HIT entries

    Have been working on configuring Oracle EPM 11.1.2 and have one final issue from the diagnostic utility that I cannot figure out. Configuration sequence is as follows and each step is installed in its own database:
    Step 1 - Foundation/Shared Services/Calc Mgr/EPMA/Essbase to a single relational DB. I am not configuring the web server until the final step.
    Step 2 - Hyperion Performance Scorecard
    Step 3 - Planning
    Step 4 - Profitability
    Step 5 - RA and configure web server.
    I have used both SQL Server Express 2008 and Oracle DB 11g and get the same result.
    When I complete the install, restart all of the services, and run the diagnostic utility, I get a failure with foundation services indicating that the file "system-jazn-data.xml" cannot be found. No real help is provided with the error message and have found no help in the docs or on the web. I have searched the disk and the file seems to be in the proper place per the docs. I have done partial configs and do not get the error. I have then compared the system-jazn-data.xml file from the successful config to the system-jazn-data.xml file from the failed config they are identical. Both files seem to be bloated with tens of thousands of lines, most of them blank.
    I had reached a point where I thought the issue was related to Performance Scorecard and removed that step. I am now getting the error again.
    Anyone seeing this issue? Is it just a bogus message in the diagnostic report and can be ignored? Any other thoughts?
    Thanks
    EPMCloud

    Update - After going through the install many more times, I still do not know what the issue is, but I believe I have figured out how to resolve it. It appears that if you go back (after everything is installed and configured) and reconfigure the application server for Foundation services, the issue is corrected.
    I am running some final test now and if I discover something different, I will update the post.
    EPMCloud

  • How to conf  in Hyperion, so the system couldn't login with the same user

    Hai.....
    how to configure in Hyperion, so the system couldn't login with the same user id in different machine ? (could you please provide me with detail step by step ? )
    rgds
    uka fp

    fane_j wrote:
    Sally R. wrote:
    Someone gave me a suggestion to go to the terminal and type in the following:
    ls /Users/Shared/.*.so
    This was published on MacWorld's site, and it's not a very good tip. Try this instead
    ls -la /Users/Shared/*.so
    Turns out I was wrong about that. Somebody else suggested something even more complicated and got this reply:
    By bastion
    Fri Feb 24 08:49:05 PST 2012
    PeterSParker said
    Your terminal statement has an extra "." in it that prevents it from working.
    Also, you should add the options -alR to show what is happening, and to search subdirectories.
    The revised command looks like this:
    ls -alR /Users/Shared/*.so
    The above is completely wrong. The command as shown in the article is appropriate.
    The "." is not extra and doesn't prevent the command from working. It's specifying that you're listing files that start with a period and end with ".so" with anything in between being matched.
    Because you're explicitly searching for things that start with "." you don't need the -a flag.
    Because you only care about simple existence and not any metadata you don't need -l.
    Because the files of interest are installed in /Users/Shared directly, and not subfolders thereof, you don't need -R.

  • Does BAM works with only Oracle database at the backend.

    Hi, I was wondering if Oracle Bussiness Activity Monitor(BAM) implemented within ADF application works with Oracle database as Oracle database is one of the very few databases supporting Database Change Notification? Or can it be implemented using MySQL database etc.
    Thanks!
    Edited by: 996574 on Jun 3, 2013 2:06 PM

    AFAIK only Oracle db supports Database Change Notification.
    Timo

  • Admin Login Gone, Guest Acct Only...

    I did a healthy search on my little problem here and mine appears to be a little different from the rest.
    I have my MacBook pro (Running the latest ver. of Tiger) set so that i need to authenticate my login and pass every time I open up the laptop or I deactivate the screensaver.
    Today, I opened'er up and for some reason my login and password didn't work. I thought that was weird and I rebooted (Ctrl-Opt-Power Button). Low and behold my Admin Login was gone! I only have access to this Guest Account that I created a while back.
    So, I login to the Guest Account and check out the Accounts Panel in System Preferences and nothing comes up. I click the button and the window hangs ("Loading Accounts" appears at the top, but nothing happens). I click 'Show All' to return to all the icons and then click Accounts and the window renders, but it's completely blank.
    *I did a lot of searching and I found the single-user-mode-using-NetInfo-Manager solution* and that didn't do anything. After I do the +"nicl -raw..."+ command, nothing seems to happen. While I was in Single User Mode, in the shell, I checked out my Users folder and my Account is still there.
    So, bottom line, I only have access to an unprivileged Guest Account and OS X can't seem to boot so I can see my Admin Account. I would much rather not reinstall OS X since I have a lot of graphic design, music and a lot of my photography work in that account.
    Message was edited by: Name Withheld

    Name Withheld wrote:
    So what are we looking for with these "nicl" commands? I take it that the above is probably bad news somehow.
    nicl is the "NetInfo Command Line" interface. I wanted to see why you were getting the "ni_listprops: No such directory" message, and it is telling me that although the /users part of the NetInfo hierarchy exists, it seems to have lost the entries for your two real users.
    We could put them back, tediously, using nicl, but who knows what other "users" are missing. So your best bet is to restore the NetInfo Database. Funnily enough I just posted how to do this for another user. You might want to read Mac OS X, Mac OS X Server: How to Replace the NetInfo Database to help understand the instructions that follow (this is a more-or-less standard post I keep for this situation). Note you've already got your list of UIDs versus Users: 501 is Ghostmeat, and 502 is Guest.
    Your NetInfo database is corrupt. so we will need to give you a new one. This involves re-creating the user accounts, and the order in which they are created matters. I recommend you print this out in a largish mono-spaced font so you don't miss any spaces (or add extra ones). Note that case is important.
    Start up in Single User Mode and type carefully, with a return at the end of each line:/sbin/fsck -y
    Repeat the above until it says your disk is OK. Then:
    /sbin/mount -uw /
    cd /var/db/netinfo
    mv local.nidb/ local.nidb.bad
    rm /var/db/.AppleSetupDone
    ls -ln /UsersThis last command will give you one line for each user, plus one for the "Shared" directory, which doesn't interest us. Each user will have a line like one of these:
    <pre>drwxr-xr-x 29 501 501 986 Jan 17 18:38 michaelc
    drwxr-xr-x 14 520 20 476 Sep 10 2004 jdoe</pre>The second numeric field (501, 520) is the user ID (UID) and you need to list the uids against the shortname s given in the final column. Make sure you get the name right for UID 501! Then continue with
    rebootWhen you restart, you should get the Setup Assistant, just as if it was a new machine. You will be prompted for all of your user information. Be careful to use the same short name as previously for user 501.
    If there are any further users, these can be added, in the order of their UIDs, i.e. 502, 503 …, using System Preferences > Accounts. Again, be careful to use the same shortname. If there are any gaps in the UID sequence 501, 502, … you will need to create dummy users to fill them. These can later be deleted.
    Post back if you need further help, and to let us know how you get on!

  • HT1473 Often times when I copy a CD into my library it breaks the CD into more than one Album, all with the same name but with only a few of the songs on each. This happens whenever the CD has music with more than one artists...like maybe duets.

    Often times when I copy a CD into my library it will break my CD into multiple albums in my library, each with only a few songs.
    Usually this is because there might be songs where the artists has other artists in the song.
    How can I compile all of the different albums (all with the same name by the way) back into one as was the original disc?

    Generally all you need to do is fill in an appropriate Album Artist. For more details see my article on Grouping Tracks Into Albums, in particular the topic One album, too many covers.
    tt2

  • HT1386 After syncing with itunes(windows), messages for one of the contact(I have saved the contact name as 'Unknown') are lost. I can see only few messages which fits to the screen. I don't see option to load earlier messages.

    After syncing with itunes(windows), messages for one of the contact(I have saved the contact name as 'Unknown') are lost. I can see only few messages which fits to the screen. I don't see option to load earlier messages.
    Can anyone help.

    Can anyone help on this?

  • Oracle Login with sysdba not working

    Hi All,
    I have oracle datatbase version 9.2.0.4 on solaris 9.
    I have assigned sysdba to a user with grant command.
    when i am trying to login with as sysdba option from a remote system running windows 2000 server, its giving error as follows.
    ORA-01031: insufficient privileges
    I can connect to the database without sysdba option.
    Kindly let me know what could the issue in this.
    thanks

    Only granting is not enough, the user also need the proper connection.You should read up on admn type authentication methods and specifically using a password file.

  • Bypass Login with Oracle Database

    hello,
    I am using Oracle forms 6i.
    i want to create an application that does not require any connection with Oracle database.
    My Application fetch all its data from an Excel file.
    I do not want Login with Database,so i want to byapass it.
    How can i do it..

    Akarsh wrote:
    hello,
    I am using Oracle forms 6i.
    i want to create an application that does not require any connection with Oracle database.
    My Application fetch all its data from an Excel file.
    I do not want Login with Database,so i want to byapass it.
    How can i do it..Hi Akarsh,
    Use ON-Logon trigger at form lebel
    and put your connection string. then when you run this , it will not ask for connection identifier.
    Hope this works..

  • Restart Admin Login Credentials in Apex 4.0 & Oracle 11gr2

    Hi all,
    We face a major issue. We are unable to connect our admin account for some unknown reason. We keep receiving the following message "Invalid Login Credentials". We tried to change the admin credentials with sqlplus.
    We tried the usual procedure "apxchpwd" successfully, but we still cannot log in.
    We then tried to create a new admin2 account with the following pl/sql block.
    SQL> connect APEX_030200 as sysdba
    Enter password:
    Connected.
    SQL> begin
    2 wwv_flow_api.set_security_group_id(p_security_group_id=>10);
    3 wwv_flow_fnd_user_api.create_fnd_user(
    4 p_user_name => 'admin2',
    5 p_email_address => '[email protected]',
    6 p_web_password => 'admin2') ;
    7 end;
    8 .
    SQL> /
    PL/SQL procedure successfully completed.
    SQL> commit
    2
    SQL> commit;
    Commit complete.
    SQL> alter user APEX_030200 account lock;
    User altered.
    SQL> quit
    We cannot connect with either admin & admin2.
    Any good idea?
    Roger

    Hi,
    I'm not expert on this area, sorry.
    I would check what like FLOW% and APEX% users there is in database.
    Also query DBA_REGISTRY what is current/valid APEX version.
    Then try again with correct APEX versions scripts reset ADMIN password.
    Regards,
    Jari
    My Blog: http://dbswh.webhop.net/dbswh/f?p=BLOG:HOME:0
    Twitter: http://www.twitter.com/jariolai

Maybe you are looking for