Remove users from Shared Services/ EPM

Gurus
I have some users who have gone to different department and some who are no more with the companies. I was just wondering if there is a script I can run in the EPM Environment/ Shared Services to remove users and the provisioning in bulk.
Thank you for your response.

Hi John,
I got it.
What I did was that I exported the GROUPS under APPLICATION GROUP -> FOUNDATION > SHARED SERVICES -> NATIVE DIRECTORY -> GROUP. Created a CSV file and deleted the user and then imported back again.
This is how it works right?
ALSO, can I totally erase the user. The above process deleted user from group. But if I need to delete the user overall from everywhere in the EPM app, is there a way to do so?
OR do I need to ask the server team to remove the user from MSAD.
Thanks

Similar Messages

  • Exclude a user from Shared Services LCM export

    How do I exclude a specific user from the Shared Services LCM export?  In the migration definition file I am trying to specify something like the following:
    pattern="*" and pattern<>"lcm_admin"

    What exactly you want to try after/by exporting users from Shared services?
    Regards,
    Santy.

  • Total de-provisioning of user from shared services

    Hi All,
    Can anyone please let me know how to de-provision a user from all individual & group access from shared services. I know that we can do this from Shared service web-link but that process is very time consuming. Is there any other way like script or macros etc.......

    Depending on version you can look at using the CSSimportexport utility or LCM which both can be run by command line scripts or you could use the API
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Administration Users from Shared Services...

    Dear Experts,
    Am using OEPM 11.1.1.2
    I have one basic question on Shared Services Users...As we are using the default login of Essbase administration services after installation and configuration to
    login to the server and this is already changed to Shared Services Security during Configuration..
    My question is can we be able to create user related to EAS from Shared Services or still we need to use the same default 'admin'? If so,
    In any case if i want to provide one user with only "create/delete applications" for Essbase....i will go and do it in Shared Services.....
    but if i want to modify something in Essbase...i still need to use EAS for modifying the application/Database information
    How can i create multiple users in EAS?
    One More, i don't see any project for Essbase Administration Services like Essbase, APS created in Shared Services after the applications have moved to Shared Services Security Mode...Is this correct? Please clarify
    Moreover, in my case userid "admin" is used for all the Application groups in Shared Services...So if i change the password for this "ID", will it reflect to all the application groups who are privileged to...
    Thanks

    My question is can we be able to create user related to EAS from Shared Services or still we need to use the same default 'admin'? If so,
    In any case if i want to provide one user with only "create/delete applications" for Essbase....i will go and do it in Shared Services.....
    but if i want to modify something in Essbase...i still need to use EAS for modifying the application/Database information
    How can i create multiple users in EAS?
    One More, i don't see any project for Essbase Administration Services like Essbase, APS created in Shared Services after the applications have moved to Shared Services Security Mode...Is this correct? Please clarify
    Moreover, in my case userid "admin" is used for all the Application groups in Shared Services...So if i change the password for this "ID", will it reflect to all the application groups who are privileged to...
    Firstly, Shared services is a centralized User management console for all hyperion applications. Once you externalize your security to shared services, You can create as many users as you want in shared services and assign him access to Essbase. How ever, You will have to go to EAS and do a "refresh security from shared services" for changes made to users in shared services to reflect in Essbase.
    For projects to appear under shared services project list, you will have to register each product with the shared services.
    If the same admin ID is used for all applications, Yes, the password change will reflect to all applications he has access to.
    -Nra

  • Can we give UNIQUE ACCESS FOR THE SPECIFIC FILE IN THE LIBRARY in SP2013? How can we remove users from SHARED WITH link where files are shared with users?

    Hi,
    Any help on this?
    Thanks
    srabon

    Hi srabon,
    For giving unique access for a specific file in a library, you can go to the library, and select the file , and click FILES->Shared With->ADVANCED, under PERMISSION ribbon, click ‘Stop Inheriting Permissions’, then the file will have unique permissions.
    For removing the shared users for a file, firstly, like the above steps, select the file , and click FILES->Shared With->ADVANCED , make sure the file has unique access, then select the users that you want to remove, and click Remove User Persmissions
    under PERMISSIONS ribbon.
    I hope this helps.
    Thanks,
    Wendy
    Wendy Li
    TechNet Community Support

  • How to extract external directory users from a shared services group from shared services RDBMS repository

    Hi,
    I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
    Thanks...

    You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
    select b.Name  ,a.Name  from HYPFOUND.CSS_GROUPS b ,
    HYPFOUND.CSS_USERS a ,
    HYPFOUND.CSS_GROUP_MEMBERS c
    WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
    c.GROUP_IDENTITY = b.IDENTITY_ID
    GROUP BY (b.Name,a.name)

  • Error from EAS - "refreshing security from Shared Services failed"

    Hi,
    I was using Native only security in HSS for Essbase 11.1.1.3 and EAS allowed me to Refresh security from Shared Services. (Essbase security was already externalized to HSS.)
    However, after I added "MS Active Directory", and provisioned a MSAD user to a native Planning group, EAS errors out with "refreshing security from Shared Services failed" .
    I checked Essbase security and that MSAD user is not added to Essbase.
    From Essbase Log I see:
    Essbase failed to get roles list for [ESB:Analytic Servers:servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [ HSS'sMSADname].
    I then tried to remove MSAD from our H Shared Services and see if this problem goes away. However, MSAD still shows on the left panel menu in H Shared Services. How can I get rid of MSAD?
    Any suggestions?
    Edited by: user643332 on May 12, 2010 12:05 AM

    Hi,
    Are you sure you have removed it from shared services, you may have just disabled it.
    You must restart the shared services application server to apply any changes made.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • CSSImport Utility - Remove Users from Groups

    We have a security group that has a few hundred users assigned to the group. When there is a need to remove a user from the group it is difficult to find the user as I have comb through the list to find the user i am trying to remove. Two questions: is there a way to sort the users in the group in Share Services? The second question is can users be removed using the CSSImport utility by specifying the "delete" option in the importexport.properties? Does the "delete" option remove the user from the secuity group and or does it delete it completely from ShareServices? (we are using Hyperion v9.3.0.1.0 Build 5)

    Hi,
    I am not so sure about the sorting but removing users from groups can be done with the CSSImportExport utility, I see you are on 9.3.0, try and get hold of the 9.3.1 version as it is backward compatible to the 9.3.0 version and more stable.
    When removing users from groups, just set your import operation to update
    import.operation=update
    and in your import csv just put the group children elements and the users you want in the group.
    #group_children
    id,group_id,group_provider,user_id,user_provider
    TestGroup,,,UserToKeepInGroup,Native Directory
    This way it will keep the users in the import file and remove the users from the group that are not in the file, also it does not remove the user from shared services only from the group.
    Ok?
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How to deregister epm instances from shared services

    Hi All,
    I had Hyperion EPM 11.1.2.1 on Windows Server A and repsitories on Oracle Database B.
    I freshly installed Hyperion EPM 11.1.2.1 on Windows Server C and configured it with repositories on Oracle Database D (which are exact replica of repositories on Oracle Database B).
    Now what I'm stuck with is that shared services on Windows Server C is still configured with Essbase/Planning instance of Windows Server A as well. This is creating problems for me when I try to access calculation manager on Windows Server C and I see Essbase/Planning applications from Essbase instance of Windows Server A.
    Is there anyway I can deregister the entire epm instance of Windows Server A from shared services on Windows Server C?
    I don't want any connections between EPM on Windows C and EPM on Windows A because soon windows server A will be retired.
    Any help will be much appreciated.
    Best regards,
    Jayant Sahewal

    Removing instances in 11.1.2.1 is not so easy, it is not until 11.1.2.3 that there is an option to remove an instance, in 11.1.2.1 you really have to uninstall products to remove them from the registry, then also try applying the registry cleaner patch to see if it helps, if it doesn't then look at the epmsys_registry utility to delete entries from the registry.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How do I remove previous configuration of Essbase Server from Shared Services?

    Hi All,
    I'm trying to reinstall Essbase Server (on a new server; we've upgraded the Essbase Server hardware) and reload data but the current install believes I've already configured it despite removing EssbaseCluster-1 from Shared Services Application Groups.  Is there something else I have to do to get the new install of Essbase Server configured as a new Essbase instance?
    Thanks,
    Ryan

    I did the install as PTH0RC and my inventory.xml is configured correctly, but I get the following message trying to run a simple view
    C:\Oracle\Middleware\EPMSystem11R1\common\config\11.1.2.0\resources\instance>epmsys_registry view
    com.hyperion.hit.registry.exceptions.RegistryException: reg.properties not configured.
            at com.hyperion.hit.registry.Registry.getInstance(Registry.java:338)
            at com.hyperion.hit.registry.regedit.RegEditUtility.main(RegEditUtility.java:101)
    An error occured during the operation. Detailed Message is - reg.properties notconfigured.

  • How to sync user for planning from Shared Services

    Hi ..
    Can anybody please let me know how to sync users for planning from shared services.
    Thank you.

    You need to expand on your question.
    But the basic concept is you create or connect (for LDAP) users in Shared Services. You also create groups as required for these users. Then in shared services you provision those user to Planning applications (directly or indirectly through groups)
    Then in Planning you will see users or groups. And in planning you connect them to either members in dimensions or to objects like Forms, Task lists, Business Rules.
    There is therefore no such thing as synching Shared Services with Planning.
    Note: the 2 steps mentioned above can be done in batch through load utilities.
    Please expand you question if necessary

  • How to get New Added User's log from shared services in 2012--Important

    Hi Experts
    All my user are MSAD users but i want to generate See log for all users in Hyperion who are all added in 2012.
    Please let me know ,we will get this information from Backend SQL and what are the tables related for this.
    Any one help me in this...highly appreciated.
    Thanks,
    RK

    Hi,
    You don't add MSAD users in shared services. The users is added to the directory that is configured as MSAD in shared services and you will
    see the user in shared services after that. I don't think so that Hyperion can provide any info regarding the users addition in shared services.
    Thanks,
    Sourabh

  • Unregister Essbase/EAS from Shared services

    Hi Is it possible to unregister essbase, EAS from shared services? if so can some one please guide me unregister. we are on EPM 11.1.1.3
    Thanks

    Hi,
    I've a similar issue with my customer.
    In fact we have an an application with several databases and end users have read access on one, write acces on another and finally calculation accesses (but only on few calc scripts) on the last database.
    SO, in shared security mode we can't reach all these requirements, beacause access are granted at the Essbase application level.
    Therefore, the only solution I've found to put Essbase in stand-alone mode is to drop the essbase.sec file and recreate the essbase applications thanks to EAS or maxl commands.
    For EAS I've found a topic on this forum, and the solution is to edit the olapadmin.properties file on the installation path of EAS server and to swith the value HUBProvisionEnabled=true at false.
    You have to stop and start the services to do that but it works. And when started, you can use the EAS default login.
    Edited by: Eric_M on May 2, 2011 6:02 AM

  • Grant the Essbase application permission to user in Shared Services

    Hi,
    We got a problem in granting the Essbase permission to user using Shared Services. We are using Hyperion 9.3.1.
    (1) We created an Essbase application + database through Essbase Administration Console, say TBC.Sales.
    (2) Provision the Essbase "Server Access" + Essbase Application "Read" roles to a user.
    (3) In Essbase Admin Console, we "Refresh Security from Shared Services".
    However, the user still cannot see the Essbase Database in SmartView. Does anyone know how to fix the problem?

    The problem is fixed with Essbase 9.3.1.3.0.5.

  • How to Generate a Report for a list of Users in Shared Services.

    I am using Hyperion 9.3.1 version.
    I have around 120 (MSAD) users in shared services and now i want to generate a report which tells what all access is given to a particular application for these users. Can anyone let me know the steps how to acheive this.
    Regards,
    Vijay Krishna.

    Hi,
    Have you tried generating a provisioning report in Shared Services, have a read of :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/provrep.htm
    If that doesn't suit your requirements then you could always have a look at using CSSImportExportUtility to export provisioning to a csv file. The utility is located in hyperion\common\utilities and has a pdf on instructions how to use it.
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for