Remove access for each member of a particular dimension from Hyperion Planning Applciation

We are trying to remove access for groups for each member of a particular dimension( which has more than 1000 members) of a Hyperion Planning application. We are going through Administration->Manage DImensions -> member , Under security click view and select the group and then remove access But the problem is there are more than 1000 members under this dimension , so it will be time consuming to go to each member and then remove access for the group. Is there any other way we can do this?
Also is there a way to bulk delete native directory groups from Hyperion Shared services, instead of deleting each native group manually one by one?

The reaso we want to go for Relational tables is that when we did Exportsecurity utility for that planning application  and imported back the SecFile.txt without doing any changes ,still it errored out giving errors like :
"The following access not imported:-"PLN-ORG-0278-999 Bureau Strtgc & Oprtnl ""PLNning",0278-999,READWRITE,MEMBER due toInvalid user name found in the file."
It is erroing out even if we did not do any modifications to the secfile.txt.
Moreover there are more than 1000 members for which we have to remove access permissions manually one by one. It is a tedious process.
So we are looking at other options like , which relational tables have got Native directory groups information, and the sql queires we can execute to remove the unwanted Native directory groups from Shared Services?

Similar Messages

  • Select one record for each member of the group

    Hi,
    am having a table where in i will be having data for so many group members. i need to fetch data for a particular group members whose number of rows of data may be more in numbers (but i want only one row of data for each member of the group)
    here is the query for fetching all rows of data
    select RI.RESOURCE_NAME,TR.MSISDN,TR.ADDRESS1_GOOGLE, TR.MSG_DATE_INFO, FROM TRACKING_REPORT TR, RESOURCE_INFO RI
    WHERE TR.MSISDN IN (SELECT MSISDN FROM RESOURCE_INFO WHERE GROUP_ID ='1' AND COM_ID=2 ) AND RI.MSISDN=TR.MSISDN
    order by MSG_DATE_INFOoutput of this query is...
    >
    ddd     12345          13-Mar-10 19:43:03
    eee     54321     Tamil Nadu, India      13-Mar-10 19:39:48
    ddd     12345          13-Mar-10 19:32:58
    eee     54321     Tamil Nadu, India      13-Mar-10 19:30:07
    ddd     12345          13-Mar-10 19:23:08
    eee     54321     Tamil Nadu, India      13-Mar-10 19:20:14
    fff     98765          13-Mar-10 19:19:22
    ddd     12345          13-Mar-10 19:13:01
    eee     54321     Tamil Nadu, India      13-Mar-10 19:09:50
    ddd     12345          13-Mar-10 19:02:56
    eee     54321     tn,ind      13-Mar-10 18:59:49
    ddd     12345          13-Mar-10 18:53:08
    eee     54321     tn,ind      13-Mar-10 18:49:50
    ddd     12345          13-Mar-10 18:42:56
    eee     54321     tn,ind      13-Mar-10 18:39:50
    ddd     12345          13-Mar-10 18:33:00
    eee     54321     tn,ind      13-Mar-10 18:29:50
    ddd     12345          13-Mar-10 18:22:54
    eee     54321     tn,ind      13-Mar-10 18:19:50
    ddd     12345          13-Mar-10 18:12:56
    eee     54321     tn,ind      13-Mar-10 18:09:50
    ddd     12345          13-Mar-10 18:02:54
    eee     54321     tn,ind      13-Mar-10 18:00:02
    fff     98765     Tamil Nadu, India      13-Mar-10 17:59:26
    fff     98765     Tamil Nadu, India      13-Mar-10 17:54:26
    ddd     12345          13-Mar-10 17:52:56
    eee     54321     tn,ind      13-Mar-10 17:49:50
    fff     98765     Tamil Nadu, India      13-Mar-10 17:49:25
    fff     98765     Tamil Nadu, India      13-Mar-10 17:44:26
    ddd     12345          13-Mar-10 17:42:56
    >
    from this output i want only one latest record for each member(ddd,eee,fff). i.e
    >
    ddd     12345          13-Mar-10 19:43:03
    eee     54321     Tamil Nadu, India      13-Mar-10 19:39:48
    fff     98765          13-Mar-10 19:19:22
    >
    how to modify the query to achieve this...?

    Hi,
    This is not giving the result which i want...
    table is
    CREATE TABLE TRACKING_REPORT
      ID               NUMBER,
      MSISDN           NUMBER(12)                   NOT NULL,
      X                NUMBER(15,8)                 NOT NULL,
      Y                NUMBER(15,8)                 NOT NULL,
      TIME_STAMP       DATE,
      MSG_DATE_INFO    DATE                         DEFAULT sysdate,
      ADDRESS1_GOOGLE  VARCHAR2(400 BYTE),
      ADDRESS2_GOOGLE  VARCHAR2(400 BYTE),
      ADDRESS_MLINFO   VARCHAR2(400 BYTE),
      REQ_ID           VARCHAR2(30 BYTE)
    CREATE TABLE RESOURCE_INFO
      RESOURCE_ID    NUMBER,
      MSISDN         NUMBER,
      RESOURCE_NAME  VARCHAR2(25 BYTE),
      ADDRESS        VARCHAR2(100 BYTE),
      COM_ID         VARCHAR2(20 BYTE),
      ADMIN_ID       NUMBER,
      TIME_STAMP     DATE                           DEFAULT SYSDATE,
      GROUP_ID       NUMBER
    )

  • The Submitter form cannot be validated if I don't fill the fields for each member of team (3). is it means that a team less than 3 persons cannot participate ??

    The Submitter form cannot be validated if I don't fill the fields for each member of team (3).
    is it means that a team less than 3 persons cannot participate    ??

    A team with less than 3 persons is eligible. One, two and three member teams are all eligible. I will remove the requirement to fill out the information for all three participants.

  • My family shares one apple id. Is there any way to make an apple id for each member of my family and have it all connected to the same credit card and have the same previous downloads open to download by signing in to each members personal apple id?

    My family shares one apple id. Is there any way to make an apple id for each member of my family and have it all connected to the same credit card and have the same previous downloads open to download by signing in to each members personal apple id?

    Hi cindy,
    If you all have individual Apple IDs, then you would be able to dowload music from a shared iTunes library on a computer, but you would not be able to sign on each individual ID on an iOS device in order to download music purchased under the original Apple ID without a 90-day waiting period between sign-ons.
    Here's what I mean:
    If you were to sign on a new Apple ID on, say, an iPhone, and then were to purchase and download some music from iTunes, then you would have to wait 90 days before you could sign on the old Apple ID to that iPhone in order to download previously purchased material (and vice versa).
    However, if all of the music purchased by that origjnal Apple ID is in an iTunes library on a shared computer, then you can hook up the device and selectively sync any music in that library to the device. You can also sign on any of the Apple IDs to that shared iTunes library and purchase music to be added to the library.
    You would need to authorize the computer for each of the new Apple IDs.
    Each of the Apple IDs would also be able to download that music purchased either by syncing to the iTunes library on the computer or by downloading it OTA on the device.
    So, each Apple ID can download music, movies, etc. purchased with that Apple ID OTA to the device. Also each Apple ID can sync any music, movies, etc. that are in the iTunes library on the computer regardless of who purchased them.
    The only other thing you would need to remember is that if an App needed to be updated, then the original Apple ID that was used to purchase that App would come up, and the password that goes with that Apple ID would be required to do the update.
    Hope that helps,
    GB

  • Error "Parent Member is found in dimension from selection"

    Hi,
    while running the export transaction data package we are getting the error " Parent Member is found in Dimension from selection".
    We cannot manually select each member as there are around 64K records which will have to manually selected. Is there a work around for the same?
    Regards
    Varun

    Hi Varun,
    The first thing is that if you are using the standard export DM package, then you should not be able to select any parent members. If you look at the advanced script of this package, the first statement will be SELECTINPUT. This will restrict the selection only to base level members. Technically, you should not select the parent members, because, the parent lelve members doesnt hold any data.
    Hope this helps.

  • How can I delete only shared instance of a member from Hyperion Planning

    Hello,
    Can anyone tell me how I can instruct the Hyperion Planning IKM to delete a only specific instance of a shared member from Hyperion Planning? I've tried specifying the shared member, the parent of the shared instance, 'Shared' as the data storage type, and 'Delete level 0' as the operation. Instead of deleting just the shared instance under the specified parent, however, the IKM deleted the base member, which in turn deleted all shared instances of the member and all the data for the member (lucky thing I'm working in a development environment!). At one point I thought I had things working as I wanted, but now I think I must have mistaken.
    Does anyone know definitively whether only a specific instance of a shared member can be deleted from Planning and, if so, exactly how to do it?
    Thanks very much.

    Well, with a careful review of my ODI interfaces and some additional testing I found my problem. My interface for one dimension was defined exactly as it should be and it worked as expected, whereas I found I had failed to activate the mapping for the data storage property in my interface for another dimension (DOH!). Naturally, the latter interface deleted the base member because the default data storage property value is 'Store'.
    Thanks for testing and confirming that deleting only a specific shared instance of a member from Hyperion Planning does work, John.
    (P.S. to John: I can't see how to change my "Helpful" tag on your first reply to "Correct", so if you want to post another reply, I'll mark it "Correct" (for more points!). Or, if you can tell me how to modify the "Helpful" tag to "Correct" I'll do that instead.)
    Edited by: Mark on May 25, 2012 3:33 PM

  • Pre-requisites for Drill-Down from Hyperion Planning to Oracle GL

    I am using Hyperion Planning 11.1.2 for maintaining budgets. I do comparison of actual vs budget in Hyperion. I export actual results from Oracle General Ledger (11.5.10) in flat file and upload to Hyperion planning using FDM. I maintain mapping in FDM for flat file and the Hyperion members.
    Q1) Is it possible to drill down actual numbers from Hyperion planning to Oracle General Ledger via FDM?
    Q2) If yes, what are prerequisites for using drill-down functionality?
    Can anyone please answer and refer some link/material that may help me in setting this up?
    Thanks in advance.

    Thanks
    But when i try to log in i m getting error bellow"
    Failure of server APACHE bridge: No backend server available for connection: timed out after 10 seconds or idempotent set to OFF."
    So do u have any other reference plz
    thanks

  • Site Studio 11g: Different security access for each user

    Hi,
    I want to limit access for some contributors and grant full access to others.
    I set up different users on the content server, assign a different contributor data file to each region, and assign unique security metadata to those files.
    As result it still display the graphic icon for those data file with only read access. The contributor is not able to edit the data file but still capable to switch or remove the data file.
    +According to the documentation only the files that a particular contributor has permission to edit will display the contribution graphic icon on the web page when in contribution mode.+
    I need that the contributor should not be able to switch the data file or remove it if he doesn't have edit access to those data files.
    I've applied the metadata security to the placeholder definition unsuccessfully.
    I am using Account Security model.
    Thanks
    al
    Edited by: user8859325 on 20-Jun-2011 08:21

    Hi,
    I want to limit access for some contributors and grant full access to others.
    I set up different users on the content server, assign a different contributor data file to each region, and assign unique security metadata to those files.
    As result it still display the graphic icon for those data file with only read access. The contributor is not able to edit the data file but still capable to switch or remove the data file.
    +According to the documentation only the files that a particular contributor has permission to edit will display the contribution graphic icon on the web page when in contribution mode.+
    I need that the contributor should not be able to switch the data file or remove it if he doesn't have edit access to those data files.
    I've applied the metadata security to the placeholder definition unsuccessfully.
    I am using Account Security model.
    Thanks
    al
    Edited by: user8859325 on 20-Jun-2011 08:21

  • My family has multiple iOS devices, all with 1 Apple ID. With iCloud coming, should I create separate Apple IDs for each member of my family?

    Hello,
    Between my family, we have 2 iPhones, multiple computers, iPads, and an Apple TV ALL tied in to the same Apple ID (the one I created when I got my first device). With iCloud coming, I wanted to know if I need to create separate Apple IDs for each family member (for emails, contacts, calendars, etc.). For instance, I would like to share certain contacts and a calendar with only my wife, all media between all family members, and have home sharing so that I can play/stream content on my Apple TV. Will there be a way to have multiple and distinct me.com accounts and yet share the same Apple ID?
    Apologies for being verbose — just wanted to give ample info/background.
    Thanks,
    Jay.

    I happened to stop at the Apple store yesterday for a separate issue and had a discussion about iCloud. Seems like this is how iCloud works (also, there's another thread on this forum that explains it well).
    Each member of the family can have their own iCloud ID, which will be used for Mail, Calendar, Contacts, Apps, Bookmarks, Media, Photos, etc. and having this content synced automatically with a Mac (computer). The iCloud IDs work in tandem with the associated Apple ID — so while you cannot have multiple Apple IDs, you can certainly have multiple iCloud IDs tagged with a certain Apple ID.
    While all this makes sense from the iOS device standpoint, I'm unclear on how things will sync with a Mac computer, especially if the family uses a single iMac with multiple login IDs for various members. For instance, I currently have an iMac and iTunes content resides in my Public folder, which my wife can still access when she logs in with her login ID. I'm guessing that I'll be able to set up her iCloud ID using her login, set up my iCloud ID using my login, while both our iMac logins will retain the same Apple ID. This would take care of syncing Photos, Contacts, Calendars, etc.
    Another (not sure if unique) problem I face is our Address Book — right now, we have one GIANT address book with different groups set up. Certain groups sync to her iPhone, while others to mine. Some contacts are common between both of us. I'm hoping that if she/I updates a common contact, then the change will be reflected in both our groups of contacts. I hope this makes sense — for instance, I update a contact named Joe, and he's on my group of contacts in my iPhone. Hope iCloud updates the master contact card for Joe on the iMac, which would then automatically trigger the update on my wife's group of contacts—that Joe also belongs to— leading to an update on her iOS device as well.
    Apologies for the lengthy response..

  • Howdo I obtain a column with the calculated age for each member in the membershiplist? memberlist

    The list contains 250 rows of names and their DoB (Date of Birth) = colum A and B.
    The 3r colum should feature the automatically calculated AGE in years only = colum C from TODAY
    It is a **** of a job to input the  DATEDIFF formula for each cell (of colum C).
    Can this be simplified?
    Pleas help to find the right solution for Numbers '09 (version 2.1)
    Thanks

    Hi Lepe,
    Assuming the first row of your table is used for labels (Name, DOB, Age, etc) and the data starts in row 2...
    In C2, enter: =DATEDIF(B2,TODAY(),"Y")
    Hover the mouse pointer over the Fill Handle (small circle) at the bottom right of the selected cell (C2).
    When the mouse pointed turns to a black cross ( + ), click and drag the control down to fill the formula into the rest of the cells in the column.
    For a 250 row table, there are other, more efficient ways of filling the formula down the column. These are described in the User Guide section referenced in Jerry's post.
    Regards,
    Barry

  • HT203433 I had a big gift card on itunes, and I downloaded a song but when I got my reciept it said I downloaded the song 3 times, and it kept doing that for EACH download I did, I went from a 20$ giftcard to zero in a bout just a few downloads, I have no

    I logged into my Ipod touch 5 gen just to download sometime I already downloaded. My brother did some purchases on the Ipod, ( using my account) I kept getting emails on my phone saying an item was downloaded 3 times, so I kept getting multiple charges for each item. I do not know how that happend, because the credit ran out super super quick, and we didn't even download that much, why did it say I got multiple downloads.

    iTunes Store Support
    http://www.apple.com/emea/support/itunes/contact.html

  • Extract dimension member in 11.1.2.0 hyperion planning

    Hi there,
    Can you please help me on this.
    We are using |Hyperion planning 11.1.2.0.0.
    I need to extract my all entity dimensions members which has attributes attached with them.
    There i no extraction tool in this version.
    Is it possible to use mdx query ? if yes can you please help me with some hints.
    Thanks

    Have a read of http://camerons-blog-for-essbase-hackers.blogspot.co.uk/2012/04/stupid-planning-queries-9-entity_3054.html
    Alternatively you could have a look at using the essbase outline extractor.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Introduce delay of 7 Days for each message of a particular type.

    I have a requirment that after receiving a message of a particular type, PI will hold the message for 7 days before processing, originally I thought a wait step in BPM maybe the appropriate solution but it isnt. (Memory usage/BPM blocking)....
    Im not sure what the best approach is to meet this requirment, other than a completely custom solution (custom table to store the message - with a background task that continues to process after 7 days).
    Ideally the solution will use the PI standard fucntionalty/tools to implement the solution, even using the file adapter to write the messages to the file system and then coming back and reporocessing in 7 days ....
    Im not sure ...
    Any input ?

    Ive had a bit of a think about this ... here is what Im thinking, given there is no defintative way of doing this correctly...
    1. Inbound File adapter reads inbound files.
    2. Transform and write the file to an outbound directory with a specific fileName mask "Day1_name.xml" based on a UDF.
    3. Create 7 File Adapters each running on seperate days 1 -> 7 picking up Files of a specific mask "Day1_*" (Day1 == monday and so on)
    4. Write the file to its ultimate destination and archieve the message when the correct file adapter is triggered.
    Advantages;
    1. No OS involvment - whilst writing a CRON job (shell script) to do this would be relatively simple it does add another point of failure.
    2. No excessive wait times/resource usage on PI
    3. In the event of a PI crash the file system will be intact where as thread.sleep(?????) will not be.
    Disadvantages;
    1. Given the possible downfalls of other solutions this seems to be best.
    Am I missing anything ...

  • Remove access for site collection administrators from sub sites

    Hi,
    We have site collection with sub sites for departments. Here few departments is having confidential data and they don't want to give access to the site collection administrators also.
    Is this possible to remove site collection administration rights for sub sites? If Yes,please tell me how can i achieve this.
    Regards,
    Saya

    Dear Nadeem,
    Thanks for your information. I have one query on permissions.
    I have created new site collection and has given site collection administrator permissions to the user "ABC" and there is no permissions for Farm administrator also. Except this user there is no other users are having any permissions to this site
    collection. Even though I am able to log in with my Farm administrator (it is displaying as "System Account").
    Any help would be greatly appreciated to resolve this as there is some confidential documents which should not be accessible to any user.
    Regards,
    Saya

  • In Powerdesigner repository, can we limit access for any user to one particular model?

    Hi
    I have this requirement in Powerdesigner repository to setup a user and give him/her access to check in and check out only one model? In otherwords, when he logs into repostiory, he can't see any other folders except the folder that was assigned to him?
    Is there a way to do this in the Powerdesigner tool.?
    thank you
    Krishna

    Sure,
    I have this requirement in Powerdesigner repository to setup a user and when he logs into repostiory, he can't see any other folders except the folder that was assigned to him?
    Step #1
    a) Connect as ADMIN
    b) In Menu go to Repository=>Administration=>Users
    c) Add user MYUSER
    Step #2
    a) In the Repository define a folder, example MYFOLDER
    b) Right click on the folder MYFOLDER
    c) Select folder permission and add MYUSER to MYFOLDER and give permission WRITE access
    Step #3
    a) Log into the repository by using your new user MYUSER
    b) Check-in a model under MYFOLDER
    b) Go to Repository : As you can see you can access models under the folder MYFOLDER
    c) You can see others folders (Because by default all folders are displayed as "List" for all users (PUBLIC) but your user MYUSER can't see the objects contained into the others folders.
    Bye
    Do not forget to give your appreciation relative to my answer.

Maybe you are looking for

  • GarageBand 3 loops missing

    I may have deleted some of GarageBand. I have version 3.0.4 (104.7) I can play all the instruments on the keyboard, so something is still there. My "loops" area shows up, but it's dull gray and I'm prompted that they're missing. Is there a download I

  • How can I change the settings of all instances of a particular effect?

    I've applied the same color correction effect to a lot of clips in the timeline. Now I want to fine tune the color correction (same setting for all clips still). How can I change the setting of all instances of the color correction effect without goi

  • Imap_MobileMe not synching to laptop or mobile.me

    Hi, on my iPhone, when I create a new event, the calendar the event is created in is imap_MobileMe.  I'm not getting any of these events synchronized to my laptop calendar, nor my mobile.me calendar.  Nor do I have a choice of which calendar to creat

  • Post Customer Down Payments F-29

    Hi experts, I have query is that, Is there any possibility to restrict user to double (same) payment entry with same reference number in F-29 t-code. I have checked in customer master but haven't successful. I have try to make an error message but is

  • Cost center data fetch from COSS/COSP tables.

    Hi Experts, I need to fetch data from COSS/COSP tables for particular Cost centers fetched in CSKS select. As there is no Costcenter field I cannot access the database tables directly. Fetching entire dat and then deleting is causing performance issu