Security export

Question

Hi ,
I am new to hyperion planning and shared services.I want to export my whole security.Not a report but the details of all the groups/users etc.
Can somebody help me on this.
Regards,
R . Arora

Answer 1

Hi,
You ll be using importsecurity and exportsecurity for your purpose.I have one doc , which might be useful to you.
This is a quick reference for the following Planning utilities:
Importsecurity
Exportsecurity
FormDefUtil
ProvisionUsers
CSS Import/Export
UpdateNativeDir
UpdateUsers
Backup.bat and Recover.bat
db_recover
Scope
Hyperion Planning Utilities
Quick Reference Guide to Hyperion Planning Utilities Syntax
Importsecurity
Location:
<Planning_Home>\bin (9.3.1 +) or
<Planning_Home>\Utils
· All users, groups, and members must be defined in the application.
· Before importing access permissions on a user-defined custom dimension, you must allow access permissions to be set on it by selecting Apply Security.
· You must name the text file Secfile.txt and save it in the \bin (or Utils if pre-9.3.1) folder
Example secfile.txt:
User1,Account1,read,@CHILDREN
User2,Entity2,readwrite,@DESCENDANTS
User3,Version_1,readwrite,MEMBER
North America,Account101,write,@ICHILDREN
Usage:
ImportSecurity.cmd “appname,username,password[delimiter],[RUN_SILENT],
[SL_CLEARALL]”
Exportsecurity
Location:
<Planning_Home>\bin (9.3.1 +) or
<Planning_Home>\Utils
Usage:
ExportSecurity.cmd /A=<appname>,/U=<username>,/P=<password>, [/
S=searchCriteria|/S_USER=<user>|/S_GROUP=<group>], [/
S_MEMBER=<memberName>|/S_MEMBER_ID=<memberName> |/
S_MEMBER_D=<memberName>|/S_MEMBER_IC=<memberName>|/
S_MEMBER_C=<memberName>],[DELIM=<delim>] , [DEBUG=true|false],[/
TO_FILE=<fileName>],[HELP=Y]
Exported file will have same format as secfile.txt example above.
FormDefUtil
Use the FormDefUtil.cmd utility to move data form definitions from one Planning application to another.
You can export or import data form definitions to or from an XML file.
You might want to use this if you are moving from a development environment to a production environment.
This utility uses a command line interface and is installed in the Utils directory. If you installed.
Planning to the default location, it is in E:\Hyperion\Planning\bin.This utility runs only on a Windows-based system.
You can run it on a Windows-based system even if your application servers are on UNIX. Only administrators can run it.
Refreshing database to Essbase before launching the form go to administration menu > manage database . select database then refresh.
Location:
<Planning_Home>\bin (9.3.1 +) or
<Planning_Home>\Utils
Usage:
formdefutil <import|export> <filename|formname|-all> <server name> <username> <password> <application>
Example:
Formdefutil export “My Big Form” localhost admin password refapp.
ProvisionUsers
Location:
<Planning_Home>\bin (9.3.1 +) or
<Planning_Home>\Utils
Usage:
Before 9.3.1
ProvisionUsers ] [A:app1[;app2;app3]] [R:30]
9.3.1 +
ProvisionUsers /ADMIN:admin /PASS:password ] [A:app1[;app2;app3]] [R:30]
CSS Import/Export
Usage:
CSSExport.bat importexport.properties or
CSSImport.bat importexport.properties or
CSSValidate.bat importexport.properties
The key to this utility is correct configuration of the properties file.
UpdateNativeDir
Location:
<Hyperion_Home>\common\utilities\nativedirectoryupdateutility\UpdateNativeDir.zip
· Can be unzipped anywhere
Usage:
UpdateNativeDir.bat –cssLocation C:\Absolute\path\CSS.xml [-nodelete] [-noprompt] [-noupdate]
· Use quotes if path contains spaces
· Edit the batch file to set JAVA_HOME path
-cssLocation - Absolute path to the location of the CSS.xml
-nodelete - Will not delete any users/groups from Native Directory.
-noprompt - Silent mode operation. Can be used for scheduled jobs.
-noupdate - Will not update any users/groups in Native Directory.
By default the utility would have delete, update and prompt option.
UpdateUsers
Location:
<Planning_Home>\bin (9.3.1 +) or
<Planning_Home>\Utils
Usage:
UpdateUsers localhost <username> <password> <application>
· Run on the Planning server using “localhost” for the servername as above.
· The user should be the application owner or an administrator
Backup.bat and Recover.bat
Location:
<Hyperion_Home>/SharedServices/<hss_version>/server/scripts
Used for backing up and recovering the OpenLDAP and Shared Services properties files.
Usage:
backup.bat <backup_directory_path> or
recover.bat <backup_directory_path>
db_recover
Location:
<Hyperion_Home>\SharedServices\<HSS_version>\openLDAP\bdb\bin
db_recover
This is used by the above scripts too but can be run manually. Stop the OpenLDAP service first.
Usage:
db_recover –h <Path_Native_Directory_data_file>
For example:
db_recover –h ../../var/openldap-data
Where openldap-data indicates the name of Native Directory data directory. This is the default location.
· -h is used to specify a home for the data other than the current directory
· -v sets output to verbose
· Before running db_recover backup the OpenLDAP data directory
· If the initial recovery does not work, remove all files other than .bdb files from the data directory and try again.
· More information is available here: http://www.oracle.com/technology/documentation/berkeley-db/db/utility/db_recover.html