Problem with Business Rules access from Shared Services

Hello,
When trying to access Business Rules from Shared Services (expand Business Rules and click on the application) I get the "Refer to the Security Guide to configure security permissions for this application" message, but the user is fully provisioned for Business Rules. It happens even logged on as admin. Access from Administration Services works fine. The version Hyperion system 9 (9.3.0.1). What is wrong? Help, please.
Thanks,
Timur

You can't access Business Rules from Shared Services. This is no different from any other application - Planning, Essbase, etc. You can provision users to the application roles, but you can't actually do anything with the application, other than security, in Shared Services. You use Admin Services to maintain Business Rules.

Similar Messages

Error with Active Directory Synchnorisation from Shared Services to Essbase

Have recently installed HS9 v 9.3.1
In Shared Services i have created both native and MSAD users. Everything works fine with the native users (Planning,EAS etc...)
MSAD user directory has been configured & tested -ok on Workspace.
The MSAD users have been provisioned and can access Workspace & Shared services without any issue.
However, when accessing Planning, the following error is displayed in the Essbase server log:
Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Create External User With Type (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051205)
Single Sign On function call [css_getUser] failed
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
Error 1051205 processing request [Create External User With Type] - disconnecting
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Set Application FrontEnd Type (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Set Application Id For Planning (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Re-Sync User/Group with Single application (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051590)
Synchronization started for user/group [MSADUser]
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051591)
Synchronization completed for user/group [MSADUser]
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051013)
User/group MSADUser does not exist
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
Error 1051013 processing request [Re-Sync User/Group with Single application] - disconnecting
---------- When accessing through XL Addin, the foll is displayed:
[Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Error(1051012)
User MSADUser does not exist
[Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Warning(1051003)
Error 1051012 processing request [Login] - disconnecting
Thanks !!!

Hardcode IP addresses instead of the server names in the essbase.cfg file and the Shared Services CSS.XML file for the Shared Services server references.
Restart SS/Essbase, provision an MSAD user, then do a Refresh from Shared Services in AAS.
Verify your MSAD userID then shows up as an Essbase user in AAS(Display User list for the Essbase server)
As long as the MSAD users show up in the user list, they should be working.

Problem with business rule

Hi all,
I have a problem with a business rule (BR) deployed as a standalone Descision service.
the BR consists on a simple decision table wich compare an input (bigInteger) with 50. It returns two facts (as output).
the two conditions are confugured (i.e. <50 and >=50).
the Decision service (stateless) is called in a simple BPEL process. in some cases the the assign activity in the bpel process rise this exception :
<bpelFault><faultType>0</faultType><selectionFailure xmlns="http://schemas.xmlsoap.org/ws/2003/03/business-process/"><part name="summary"><summary>empty variable/expression result. The XPath variable or expression /ns5:callFunctionStatelessDecision/ns5:resultList/ns6:processResponse/ns6:CodeRetour is empty at line 440. An attempt to read or copy data referenced or computed by the XPath expression either had invalid data, according to the XML schema, or did not contain certain optional data. Ensure that the variable or expression result named in the error message is not empty. Enable XML schema validation of related variables to ensure the run-time data is valid. </summary></part></selectionFailure></bpelFault>
it seems like an output of the business rule used by the assign after the invoke activity is empty.
But in the input payload for the decision service all elements are not empty. I can't inderstand how the OBR return an empty variable?
Any help please?

In the taskflow you should be capable to trace step by step what happens in the execution. Does this give any clue, e.g. why sometimes the assert does not work?
cu
Andreas

Problem with Business Rules in OBPM 10.3.1 Enterprise for WebLogic

We're having a problem with our Business Rules. We've updated two of our business rules (that are used by business rule transitions) in Studio; however, when we publish the updated process, the business rules are not updated. We cannot find anywhere in the Process Admin where to administer the rules to make sure they're overwritten.
I've double checked, and the updated rule code is in the .project.xpdl, but for whatever reason, the rules are not being updated during the deployment. I'm sure that we've done this many times in the past, but for some reason, now it is not working.
We're tried variations of the different versioning when we publish, and we've also tried to unpublish all of the older versions of our process, but it does not change the business rules. We can try to unpublish and undeploy, but it seems like we would lose all old instances of that process that are still running if we did that.
Has anyone ever had this issue, or know if there is a way to effect the business rules via the process admin?

I see what you're saying, but here's why it works the way you're observing it.
Once deployed, the 10g business rules are edited by a business user (the owner of the rule). Changes in Studio that a developer makes to a business rule don't override the changes that the business user made.
To let the business owner edit the rule, add a Global Interactive activity and change its property setting to edit the business rule. Put this activity in the role for the business owner (the person you want to edit the rule).
Dan

Problem with Business rule-Essbase Error(1042017):

Hi,
I am getting the following error when i run this business rule specifically.
Detail:Cannot calculate. Essbase Error(1042017): Network error: The client or server timed out waiting to receive data using TCP/IP. Check network connections. Increase the NetRetryCount and/or NetDelay values in the ESSBASE.CFG file. Update this file on both client and server. Restart the client and try again.
I dont get this error with any other rule. I have checked the solution provided in this link
_[http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_esb_error/erhelp.htm#ercalc.htm]_. But this solution wont help because i dont get this error in any other rule.
The rule i run is
"Depreciation Value" = "Cumulative.Asset value"/ ("Assumptions_Programs"->Jul->@UDA(Entity,@NAME(@CURRMBR(Location)))->@UDA(Location,@NAME(@CURRMBR(Location)))->"Assets life in months");
The functions in the above rule will get replaced as below
"Depreciation Value" = "Cumulative.Asset value"/ "Assumptions_Programs"->Jul->IND_Assumptions->LOC_IND->"Assets life in months";
If i hardcode and run, i dont get this error. Please help.
Regards,
Ragav.

The reason it works when you hard code it and why it doesn't when use UDA is simply that you should never have a multiple answers in a cross dimensional. @UDA function returns multiple answers. Even if for your case it only brings back one I believe it is tripping up the calculation. Worse if you are actually bring back multiple answers for @UDA that is definitely not going to work.
I would have to understand all your fixes above the calcultion to recommend you the best possible solution. But at least you understand why you are getting the error and what you have to fix

Problem with Business Rules

Hi,
I just started with a simple Business rules sample.
All the time only the first condition in the rule set seem to be executed and the result is same inspite of conditions not matching the first condition.
Am I doing something wrong?
Thanks,
Prabu

Maybe not, the rule may be working as designed. If you are doing a simple rule you also need to implement the negative, e.g.
if I have a rule that price must be greater that $1000
if price > 1000 then ...
The rule will only activate for prices greater than 1000 what about less than?
so you need to implement the negative
if price <= 1000 then
cheers
James

Problem with ![CDATA inserted from Oracle Service Bus business service

Hi All,
Dear Experts I have inserted an XML as string in another XML message. The problem is that when the XML is passed to a business service the business service sends the string surrounded with the CDATA (i.e.) :
<h>
<e><![CDATA[<a>XYZV</a>]]></e>
</h>
instead I shold need the the business service does not change the original format (i.e.) :
<h>
<e><a>XYZV</a></e>
</h>
Thanks a lot,
Mike

Hi Mike,
I probably answered this question in your other thread, but here it goes again...
If you want to insert the XML as a string into another XML, you should use the fn-bea:serialize() XQuery function.
Please refer to the following documentation:
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e15867/xquery.htm#i1106823
or in PDF if the link above is not working:
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e15867.pdf
Regards,
Rodrigo

Problem with Business partner flow from R/3 to CRM

Hi,
We are setting up a process to flow of Business Partners from R/3 to CRM.
We have configured PIDE correctly but the problem is when I am creating any customer in R/3 we are getting DUMP.
Kindly help me in this regards.
Thanks

Hi,
Check out the following Middleware Configuration :
 CRM Middleware configurations
1. Source client for Client copy
 Using t-code SCC3 in both CRM and ISU to get the source client used for client copy. Get source client for profile SAP_ALL.
2. RFC Destinations
 Use t-code SM59 and check if the following RFC destinations have been created:
 CRM
o R/3 Destination for CRM e.g. CRTCLNT240
o R/3 Destination for ISU e.g. ISTCLNT240
o Logical Destination for Middleware R&R queues one for current client and one for client 000. e.g. SAPCRM_MW_RR_240, SAPCRM_MW_RR_000
o TCP/IP Destination for IPC dispatcher e.g. IPC_RFC_DISPATCHER
o TCP/IP Destination for IPC server e.g. IPC_RFC_SERVER
 ISU
o R/3 Destination for CRM e.g. CRTCLNT240
o R/3 Destination for ISU e.g. ISTCLNT240
3. Logical Systems
 Using t-code SALE check if the following logical systems have been created:
 CRM
o Own logical system e.g. CRTCLNT240
o Logical system for ISU e.g. ISTCLNT240
o Logical system for source client used in client copy e.g. CRTCLNT200
 ISU
o Own logical system e.g. ISTCLNT240
o Logical system for CRM e.g. CRTCLNT240
o Logical system for source client used in client copy e.g. ISTCLNT200
 Check if own logical system is assigned to the client.
 Path: Sending and Receiving systems -> Logical Systems -> Assign Client to Logical System.
 Convert Logical System name in application tables
 Use t-code BDLS to convert logical system names in the application system.
1. Enter old logical system name retrieved in step 1. e.g. CRTCLNT200
2. Enter new logical system name e.g. CRTCLNT240.
3. Select radio button Conversion of Client-Dependent Tables and execute the transaction.
This process needs to be carried out 4 times: twice in CRM and twice in ISU.
 CRM
o Old CRM logical system -> New CRM logical system. e.g. CRTCLNT200 -> CRTCLNT240.
o Old ISU logical system -> New ISU logical system. e.g. ISTCLNT200 -> ISTCLNT240.
 ISU
o Old CRM logical system -> New CRM logical system. e.g. CRTCLNT200 -> CRTCLNT240.
o Old ISU logical system -> New ISU logical system. e.g. ISTCLNT200 -> ISTCLNT240.
4. Middleware Parameter tables
 Use t-code SM30 to maintain middleware parameters in following tables
 CRM
o Table SMOFPARSFA:
 Change value for following parameter entry:
 Key - R3A_COMMON
 Para name - CRM_DEFAULT_DESTINATION
 Value - Old ISU logical system -> new ISU logical system
 E.g. ISTCLNT200 -> ISTCLNT240
 ISU
o Table CRMRFCPAR:
 Delete the previous entry for the following key:
 User - CRM
 Object name - *
 RFC Destination - Old RFC destination for CRM e.g. CRTCLNT200.
 Load types - All Load Types
 Create new entry with following data:
 User - CRM
 Object name - *
 RFC Destination - New RFC destination for CRM e.g. CRTCLNT240.
 Load types - All Load Types
 In Queue flag - X
 Send XML No XML
o Table CRMPAROLTP:
 Change value for following parameter entry:
 Para name - CRM_DEFAULT_DESTINATION
 User - CRM
 Value - Old CRM logical system -> new CRM logical system
 E.g. CRTCLNT200 -> CRTCLNT240
5. Admin Console (Sites and subscriptions)
 Using t-code SMOEAC in CRM change attributes for the following sites.
 CRM site
o Name: Change name from old CRM logical system -> new CRM logical system e.g. CRTCLNT200 -> CRTCLNT240
o Description: Change description from old CRM logical system -> new CRM logical system e.g. CRTCLNT200 -> CRTCLNT240
o Site attributes: Change RFC destination from old CRM RFC destination to new CRM RFC destination e.g. CRTCLNT200 -> CRTCLNT240
o Click on get values button to refresh logical system details.
 ISU site
o Name: Change name from old ISU logical system -> new ISU logical system e.g. ISTCLNT200 -> ISTCLNT240
o Description: Change description from old ISU logical system -> new ISU logical system e.g. ISTCLNT200 -> ISTCLNT240
o Site attributes: Change RFC destination from old ISU RFC destination to new ISU RFC destination e.g. ISTCLNT200 -> ISTCLNT240
o Click on get values button to refresh logical system details.
 Check if ISU site is assigned to following subscriptions.
 All Business Agreements (MESG)
 All Business Partner Relationship (MESG)
 All Business Partners (MESG)
 All Business Transactions
 IS-U Connection Objects (MESG)
 IS-U Contracts (MESG)
 IS-U Points of Delivery (MESG)
 Product Materials (MESG)
6. CRM Middleware Queues
 Inbound Queues:
I. Execute transaction SMQR.
II. Change AS group from DEFAULT to parallel generators. Path: Edit -> Change AS Group
III. Register following queues:
 CRM
o CSA*
o R3A*
 ISU
o R3A*
Outbound Queues:
I. Execute transaction SMQS.
II. Change AS group from DEFAULT to parallel generators. Path: Edit -> Change AS Group
III. Register following queues:
 CRM
o CSA*
o R3A*
 ISU
o R3A*
R&R Queues:
I. Execute transaction SMOHQUEUE in CRM.
II. Check if all queues have status Released.
III. Start Queue Demon by clicking on Start Queue Demon.
Please reward points if it helps.
Regards,
Amit Mishra

Naming Problems with EJB when accessing from WebApplication

Hi all,
I'm trying to deploy an application consisting of several stateless session beans, one message driven bean and a web application. Everything works fine, until I try to log in (webapp). Then I get the following error:
com.sap.engine.services.jndi.persistent.exceptions.NameNotFoundException: Path to object does not exist at ik, the whole lookup name is ik/sec/IKAuthenticationEJB.
So the lookup name ik/sec/IKAuthenticationEJB is used in the code, whereas the JNDI Name of the requested bean is
sap.com/Integrationkernel/IKAuthenticationEJB (As showed in the Admin Tool). I'm wondering why there is this "sap.com" as I choosed a different name for the provider (But the error remains even if I change it to "sap.com").
As I cannot find any information about the "NameNotFoundException" I just tried the following:
- add a "ejb-ref" section to web.xml
<ejb-ref>
 <ejb-ref-name>ik/sec/IKAuthenticationEJB</ejb-ref-name>
 <ejb-ref-type>Session</ejb-ref-type>
 <home>com.tsystems.ik.security.authentication.IKAuthenticationEJBHome</home>
 <remote>com.tsystems.ik.security.authentication.IKAuthenticationEJBRemote</remote>
 <ejb-link>sap.com/Integrationkernel/IKAuthenticationEJB</ejb-link>
</ejb-ref>
- add a web-j2ee-engine.xml to the Web Application:
 <web-j2ee-engine>
 <ejb-ref>
 <ejb-ref-name>ik/sec/IKAuthenticationEJB</ejb-ref-name>
 <jndi-name>sap.com/Integrationkernel/IKAuthenticationEJB</jndi-name>
 </ejb-ref>
 </web-j2ee-engine>
Does anybody know what to do? Did I declare the references in a wrong way?
Is there a complete API Javadoc available? I just found the very small one on SDN...
Thanks a lot,
Nadine

Hi Nadine,
in order to lookup ab EJB from a web component you have to declare an ejb reference (ejb-ref section) in the web.xml. The jndi name in the web-j2ee-engine.xml can be omitted if you are sure that the information provided by the "ejb-ref" section is sufficient to identify the EJB component.
From the example you wrote I see that the ejb-link element is not correct. According to the EJB 2.0 FR specification (Appendix B, page 518) "ejb-link element must be the ejb-name of an enterprise bean". Probably this inconsistent information misleads the EJB Container in resolving the right reference.
My advice is simply to omit this and leave the "home" and "remote" elements. They should be enough.
A hint: you can use the "lsn" shell command from the "naming" group to observe the JNDI tree on a particular server node.
I hope this will help you.
Best regards,
Svetoslav

Total de-provisioning of user from shared services

Hi All,
Can anyone please let me know how to de-provision a user from all individual & group access from shared services. I know that we can do this from Shared service web-link but that process is very time consuming. Is there any other way like script or macros etc.......

Depending on version you can look at using the CSSimportexport utility or LCM which both can be run by command line scripts or you could use the API
Cheers
John
http://john-goodwin.blogspot.com/

We have created shared folder on multiple client machine in domain environment on different 2 OS like-XP,Vista, etc. from some day's When we facing problem when we are access from host name that shared folder is accessible but same time same computer when

Hello All,
we have created shared folder on multiple client machine in domain environment on different 2 OS like-XP,Vista, etc.
from some day's When we facing problem when we are access from host name that shared folder is accessible but same time same computer when we are trying to access the share folder with IP it asking for credentials i have type again and again
correct credential but unable to access that. If i re-share the folder then we are access it but when we are restarted the system then same problem is occurring.
I have checked IP,DNS,Gateway and more each & everything is well.
Pls suggest us.
Pankaj Kumar

Hi,
According to your description, my understanding is that the same shared folder can be accessed by name, but can’t be accessed be IP address and asks for credentials.
Please try to enable the option below on the device which has shared folder:
Besides, check the Advanced Shring settings of shared folder and confrim that if there is any limitation settings.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

I have a tesco router and an external hard drive attached to it as a network drive (shared) for my macbook and MB-Air. Have no problems with my MB accessing it, but with MB-AIR it says - 'the version of the server you are trying to connect to is not supp

I have a tesco router and an external hard drive attached to it as a network drive (shared) for my macbook and MB-Air. Have no problems with my MB accessing it, but with MB-AIR it says - 'the version of the server you are trying to connect to is not supported. pls contact your system administrator to resolve the problem'. MB-Air uses maverick downloaded yesterday - upgrade from mountain lion. MB uses snow leopard still, as i am quite used to it and am thinking of upgrade if mavericks work fine on air. Also have parallel on snow leopard but it is no longer supported according to mac website - if i upgrade am i going to lose my parallel and will have to buy a new one!!!

Yes, the Old Master file has a folder for each year where I find all photos from that specific year. I am attaching a screen shot of the file.
In the meantime i have managed to download all photos (it did not download any video files though in mpg, avi, 3gp, m4v,mp4 and mov format) to a new iphoto library. Unfortunately the photos are quite mixed and often doubled up. I ma considering to purchase iphoto library which checks all duplicates in iphoto. this will save me a lot of time. What do you think?

Unable to provision Business Rules access for users

Hi all,
Our analytic server is properly configured in Shared Services : we can correctly create users, provision Essbase access for those users, change password, etc...
An application business rules is visible in the left pane of shared services, but we are not able to provision Business rules access for users.
When we try to provision access for a user, we have only access to the Analytic properties.
What's going wrong ?

It sounds like the user you login to HSS with hasn't been assigned with "Provisioning Mgr" rights to business rules.
Get the HSS admin user to grant you these rights and you should then be able to provision users to use Business RUles.
Gee

Problem assigning Essbase Security filters in Shared Services

We recently upgraded Planning/Essbase to System 9 version 931 in Test. Everything went smoothly except for few users Security didn't migrate properly.
In Shared Services, it shows that user has access to Planning & Native Essbase Applications. But in Essbase, only Planning Application access is shown.
Also when I try to apply security filters for these users in Native Essbase Applications (in Shared Services), I don't see these particular users.
There is no problem with Planning security, except when I refresh Security from Shared Services in Analytic Admin Console it wipes out Planning Application access in Essbase.
For other users there are no issues. Only for few users this is the problem. I have tried to deprovision user & provision back, but no use.
Please Help

Essbase/Planning security is multi tiered. In Shared Services you setup your groups. You provision your groups with adequate security access. Depending on whether you have updated a cetain .css file(to fix bug) you may have to assign the read, write calc access to the group not just calc, but all three if your users need the access to actually, read, write & calc. of need user to just read & write etc... then you have to go to EAS refresh, run maxl script to assign environment access to user, go back to shared services go into projects assign any needed access to calc & filter groups and essbase is setup. For planning you also have to go to workspace and migrate identities within the security setup for any of your dimensions. this comes into play when adding or removing users as filters are created in planning workspace. I just learned this from one good tech that helped me setup & remove users as I had issues getting them in and out of the system..Now to move on to actually getting security reports that make sense for planning with the associated access. If anyone has the maxl code let me know.

How to deregister epm instances from shared services

Hi All,
I had Hyperion EPM 11.1.2.1 on Windows Server A and repsitories on Oracle Database B.
I freshly installed Hyperion EPM 11.1.2.1 on Windows Server C and configured it with repositories on Oracle Database D (which are exact replica of repositories on Oracle Database B).
Now what I'm stuck with is that shared services on Windows Server C is still configured with Essbase/Planning instance of Windows Server A as well. This is creating problems for me when I try to access calculation manager on Windows Server C and I see Essbase/Planning applications from Essbase instance of Windows Server A.
Is there anyway I can deregister the entire epm instance of Windows Server A from shared services on Windows Server C?
I don't want any connections between EPM on Windows C and EPM on Windows A because soon windows server A will be retired.
Any help will be much appreciated.
Best regards,
Jayant Sahewal

Removing instances in 11.1.2.1 is not so easy, it is not until 11.1.2.3 that there is an option to remove an instance, in 11.1.2.1 you really have to uninstall products to remove them from the registry, then also try applying the registry cleaner patch to see if it helps, if it doesn't then look at the epmsys_registry utility to delete entries from the registry.
Cheers
John
http://john-goodwin.blogspot.com/

Problem with Business Rules access from Shared Services

Similar Messages

Maybe you are looking for