Security Settings for two admin groups with shared service

Hi all,
I use Essbase Administration Services 11.1.2 and Hyperion Shared Services Console 11.1.2.0.73 (Drop 17)
Access Rights are granted via Groups in Hyperion Shared Service Console.
We have two admin groups.
AccessGroup 1: admin rights on some cubes (A) and read rights on all others (B).
AccessGroup 2: admin rights on (B) and read rights on (A).
If someone of AccessGroup 1 copies a cube of (A) – Fin_rep for example – wether AccessGroup 1 nor AccessGroup 2 can even see the cube (and i dont even mention admin rights) execpt the one who copied it.
Settings in Shared Services Console:
- Both groups have role "Create/delete application" and "AccessManager" (or something like that - german word is "Zugriffsberechtigungsmanager") on Essbase Cluster (our essbase server).
- AccessGroup 1 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (A)
and role "Read" for all cubes with read only (B)
- AccessGroup 2 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (B)
and role "Read" for all cubes with read only (A)
I hope i can get some help with this topic.
Thank you in advance,
Best regards
Bernd
Edited by: 907705 on 07.02.2012 02:52

Security will not copy over when you create new cube from old cube. You have to grant security to required groups using shared services or Maxl.

Similar Messages

Tab Item change for two panel group with 4 tabs each

Hi
All
Will tab work for dynamic data loading in a panel group ?
scenario .
Panel group got 4 tabs . each tab contains grid view jsf component. these grid view will populate data once the Index page loads . each tab;s grid view will get data dynamically from backing bean with value objects .
i am getting data for first tab . which is selected as true . but cannot change focus to other tabs. the functionality of tabchange event listener is not working. i checked the data for other tabs grid view. its coming correctly but cann;t see it in jsf page.
tabs won;t work . is there any reason which stops working of tab , when we pass data dynamically to all grid views in 4 different tabs at a time.
thanks in advance.
Rambhapuri

Data loading is happening , but cann;t change the tab , because tab item listener is not firing . when user clicks on other tab.
regards
rambhapuri

Register with shared services - failed

I am trying to install EPM 11.1.1.2 and I get this error for the point "register with shared services" for every item except Essbase.
Shared Services is running, I can connect to the Web App on localhost:28080/interop and manage users and groups but it seems that registering things with it just does not go through.
any ideas? has someone had the same problem and solved it?
thank you in advance for your support.
Micha Roon

Hi,
Glad to hear you think the installation was a piece of cake!!
I think you may get this error when configuring a product selecting "perform first time configuration".
Are you using a single repository for all your products?
Could you maybe recreate new databases, including shared services and try again?
Seb
www.capiotech.com

WRT54GP2 security settings for HP Ipaq 111 handheld

I have a home wireless network, using a Linksys WRT54GP2 wireless router. I'm trying to secure the network, with has 3 wireless systems, my home PC, a notebook, and my Ipaq 111. I can get my home PC and the notebook to work when I setup the WRT54GP2 router using Authentication: WPA-Pre-Shared Key and Data Encryption: TKIP, but the Ipaq 111 will not even see the router with any security setting. When the security settings for the Linksys Wireless Router WRT54GP2 are disabled the Ipaq 111 sees the router and connects to the internet.
The HP Ipaq 111 handheld has the following security options: Authentication: Open, Shared, WPA, WPA-PSK, WPA2, WPA2-PSK. Data Encryption: Disabled, WEP, TKIP, AES.
Does anyone have any ideas of how to get the Ipaq 111 to work on the secured Linksys WRT54GP2 router?
Thanks for any help.
John

On your Router setup page, Click on the Wireless tab and below change the Wireless Channel to 11-2.462GHz and click on Save Settings, then click on the Sub tab Advanced Wireless Settings and below Change the Beacon Interval to 75,Change the Fragmentation Threshold to 2304,Change the RTS Threshold to 2304 and Click on Save Settings...
Now see if you can locate your Wireless Network and attempt to connect to it on your Ipaq.

WRT54GP2 security settings for a HP Ipaq 111 handheld

I have a home wireless network, using a Linksys WRT54GP2 wireless router. I'm trying to secure the network, with has 3 wireless systems, my home PC, a notebook, and my Ipaq 111. I can get my home PC and the notebook to work when I setup the WRT54GP2 router using Authentication: WPA-Pre-Shared Key and Data Encryption: TKIP, but the Ipaq 111 will not even see the router with any security setting. When the security settings for the Linksys Wireless Router WRT54GP2 are disabled the Ipaq 111 sees the router and connects to the internet.
The HP Ipaq 111 handheld has the following security options: Authentication: Open, Shared, WPA, WPA-PSK, WPA2, WPA2-PSK. Data Encryption: Disabled, WEP, TKIP, AES.
Does anyone have any ideas of how to get the Ipaq 111 to work on the secured Linksys WRT54GP2 router?
Thanks for any help.
John

What is the model no of the Wireless Adapter you are using on the HP laptop...?
Have you tried updating the driver for the adapter...?
Try to adjust the wireless settings on the router...Open the setup page and Under the Wireless tab,Change the Network Mode to mixed...Keep the Wireless Channel on 11-2.467GHz and click on save settings...Under the Advanced Wireless Settings, Change the Beacon Interval to 50,Change the Fragmentation Threshold to 2304,Change the RTS Threshold to 2304 and Click on Save Settings...

Remove Send-As for domain admin groups

With referring to below link.
http://social.technet.microsoft.com/Forums/exchange/en-US/d2e97e64-536a-4c46-8e57-e0ac6a4ad64e/how-do-i-remove-domain-admins-send-as-settings-for-all-users?forum=exchangesvradminlegacy
The solution work perfectly for normal user but for user whose member of Domain Admin as well, the send-as will revert back from Deny to Allow after a while.
I have a user who member of domain admins group, say User A. Since we want to remove the send as for all users (including User A), I did followed the steps, Denied Send-As for Domain Admins group for User A.
However, after for while it return back to Allow.

The permissions on members of special groups is managed by the AdminSDHolder and SDProp.
http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx
The way to deal with this is to give your domain admins (and any other admins) a separate account and to remove their "normal" account from any privileged groups (and to reset the adminCount property and "allow inheritance" on the "normal" account). Do NOT
give the admins a mailbox.
If you can't do that, then deny the Domain Admins group the "Send As" and "Receive As" permission at the organization level in the AD's configuration container. Use ADSIEDIT to do that here:
CN=<Organization>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<domain>,DC=<tld>
--- Rich Matheisen MCSE&I, Exchange MVP

Java WebDynpro's and IE security settings for file download

We have a EP 7.0 SP13 environment on which we have deployed a number of own developed java webdynpro's. In some of these webdynpro's we provide the file download functionality. The portal and webdynpro's are used by both internal personnel and external customers.
On the other hand the default Internet security settings for Internet Explorer, disable "Automatic prompting for file downloads".
When a user, with these default security settings active, tries to use our webdynpro's file download functionality, the screen seems to refreshes but no file download starts. When (s)he retries, the session runs for some minutes and gives following error message:
"com.sap.tc.webdynpro.services.session.LockException: Thread SAPEngine_Application_Thread[impl:3]_20 failed to acquire exclusive lock on client session ClientSession".
This behavior is explained in SAPNote 1234847. Webdynpro provides a single-thread module, meaning a user session is blocked for the during of the request. And because the previous file download isn't yet completed the new try can't start.
Issue now, although the users IE settings allow file downloads and don't block pop up's, he can't download the file and even isn't made aware of the cause of the failure.
How can we avoid this issue, without having to communicate the
application requires specific browser settings?

Welcome to the Apple Support Communities
See > http://support.apple.com/kb/HT5290
You can install the program using different ways:
1. Right-click the application installer and choose Open.
2. Go to System Preferences > Security and Privacy and select Anywhere in Allow applications downloaded from

Security Settings for more

I saw this on a site that has many users in Iran
This setting does not harm anyone to use and useful
Or not.
Security Settings for more I With a simple trick for the Firefox browser you can always Certificate of forged and stolen check in Amman Even if all the fake certificate to get It is mentioned in the ability of the default browser is Chrome
[IMG]http://i56.tinypic.com/2hxp0jo.jpg[/IMG]
(My choice when ocsp server connection fails, treat the certificate az invalid The chrome is not activated in your browser, you can enable this option, none of the sites Sites such as the bank's internal pull Vardsh Nmytvnyd) Message to your browser if the connection is untrusted or ocsp error gave me a few times to retry This message was repeated again Mlvmh Jlyh site certificate Gmail did not do anything and sit in. I think what Yahoo's Site of the National Bank The fake site, your freedom The main site of your freedom
2. Firefox and Chrome browsers, by default the system uses rc4 128 bit encodings The system according to security experts, is one of the weakest systems encodings I will use it only for high speed One of the reasons that the wep hack wireless internet use Hmynh But unlike wireless Internet connections that use wpa2 aes encodings system In theory you could perform any For more information, read this article I did not find any option in Chrome that I can disable this feature To disable this option in the Firefox browser, do the following operation about: config Type I rc4 All of the following options to make false Tqyyr
[IMG]http://i51.tinypic.com/mbr51i.jpg[/IMG]

Check the file /etc/pam.d/sshd and /etc/pam.d/login.
Adjust the entry auth required pam_tally2.so deny=5 onerr=fail, as needed.
Modify deny= to the number of allowed failed attempts.
Refer to Mos Note 1269133.1 for details.

Registration with Shared Services failed for EAS, APS, Workspace & Planning

Hi All,
I have installed 11.1.1.3 hyperion suite with OAS as web application server.
The architecture is
Server 1: Shared Services
Server 2: Workspace
Server 3: Planning
Server 4: EAS & APS
Server 5: FR & Web Analysis.
Registration of Planning, EAS, APS & Workspace with shared services failed. Configtool_err.log says:
(May 23, 2011, 05:36:52 PM), com.hyperion.cis.config.CmsRegistrationUtil, ERROR, Failed to authenticate user = admin
(May 23, 2011, 05:36:52 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
Error Code: -1
com.hyperion.css.common.configuration.CSSConfigurationException: 20:3008:Failed to connect to native directory.      Error Code: 9
     at com.hyperion.css.spi.CSSManager.getProviderInstance(Unknown Source)
     at com.hyperion.css.spi.CSSManager.initProviders(Unknown Source)
     at com.hyperion.css.spi.CSSManager.initialize(Unknown Source)
     at com.hyperion.css.spi.CSSManager.<init>(Unknown Source)
     at com.hyperion.css.spi.CSSManager.getInstance(Unknown Source)
     at com.hyperion.css.CSSSystem.initCSSSystem(Unknown Source)
     at com.hyperion.css.CSSSystem.getInstance(Unknown Source)
     at com.hyperion.cis.config.CmsRegistrationUtil.getStandAloneCSS(CmsRegistrationUtil.java:440)
     at com.hyperion.cis.config.CmsRegistrationUtil.<init>(CmsRegistrationUtil.java:82)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeHubRegistrationTask(RunAllTasksWizardAction.java:422)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:236)
     at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
(May 23, 2011, 05:36:53 PM), com.hyperion.planning.HspDBConfigurator, ERROR, Error happened: null
(May 23, 2011, 05:36:53 PM), com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
com.hyperion.cis.config.ProcessingException
     at com.hyperion.planning.HspDBConfigurator.configure(HspDBConfigurator.java:209)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeDbConfigTask(RunAllTasksWizardAction.java:658)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:202)
     at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
I tried to telnet port 7777 & 28089 of server 1 from each server. The connection failed. I have asked the network team to open the required hyperion ports
Can anybody help me on this.
TIA

Just out of interest why have you used OAS as it is pretty much dead product now and is not used in future releases.
Anyway I am not sure why you have closed ports between those servers, you will end up spending a lot of time trying to open all the required ports between the servers.
Can you not get all the ports open for a time just to check it definitely is a ports issue.
It is probably also worth checking the following spreadsheet out - http://www.oracle.com/technetwork/middleware/bi-foundation/epm-components-communications-fd-11-128629.xls
It highlights the ports used in communication.
Cheers
John
http://john-goodwin.blogspot.com/

Performance Scorecard - unable to sync security with Shared Services

Hi all,
after successful installation of HPS we have provisioned users in Shared Services console for using HPS application. Now we need to sync HPS application with HSS. We have logged as "admin" to run this sync but we are missing Administration menu.
Could anyone give us an advice how to fix it?
Thanks,
Vladino

Hi Amith,
Before configuring EAS with Shared Services, please verify following:-
1- Installaed relational database repository (SQL Server, Oracle, DB2).
2- Create a database called hypdb in database repository.
3- Create user called hypuser with valide password who has access on this database.
4- Also ensure service related to database repository is running.
Now try to configure EAS with SS. Hope it will help you.
Atul K,

Query security settings for users

Hi again.
I'm looking for a way of querying security settings for a user.
ie I understand that company/division etc security is implemented through responsibilities.
In which case, is there a way to retrieve those exclusions per user?
(eg User 1 cant see company 50)
Thanks,
g.

Hi again.
I'm looking for a way of querying security settings for a user.
ie I understand that company/division etc security is implemented through responsibilities.
In which case, is there a way to retrieve those exclusions per user?
(eg User 1 cant see company 50)
Thanks,
g.

How to create a transaction code for a function group with screen 100 as st

Hello ,
I have requirement where I need to create a function group and create screen 100, 200, 300 and include the function in the screens.
Customer asked me to create a transaction with the screen 100 as the starting screen.
Can you please let me know how to create a transaction code for a function group with screen 100 as starting screen.
[ It is not a module pool program ].
Thanks
Prashanth.
Moderator message - Please ask a specific question and do not ask the forum to do your work for you - post locked
Edited by: Rob Burbank on Jun 2, 2009 11:49 AM

Go to transaction SE93, enter a transaction code that you want and click on "create". Enter a text and select the "Transaction with Parameters" button. In the Default Values section, enter START_REPORT in the transaction field. Check the "skip initial screen" box. In the Name of Screen field section enter the following lines:
Name of screen field:                               Value
D_SREPOVARI-REPORTTYPE                RW
D_SREPOVARI-REPORT                        ZPCA
Save and transport accordingly.

How to provide security settings for the adobe form using livecycleDesigner

Hello,
I am very new to form designing,
can any one please tell me how to provide security settings for the adobe forms at client side?
Regards,
Menaka

Hi,
that is a good topic for the ADFS forum.
ADFS forum - http://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=Geneva
But you could pass the user-agent as incoming claim type Client User agent. User-agents can be manipulated, so if that is an issue you can look into Device Registration and the Device OS type from there. That is also a incoming claim but requires DRS and
DRS is not available for all plattforms.
Hth,
Lutz

'Sensible' Definition & Security settings for a Production APEX environment

Hi Folks.
What's the feeling on Definition and Security settings for a production APEX application?
Here are my settings for my UAT environment (not quite in production just yet)
Debugging: NO
Status: AVAILABLE
Build Status: RUN APPLICATION ONLY
Authorization Scheme : MUST NOT BE PUBLIC USER
Session State Protection: ENABLED
In the APEX Administration setup, access to my site is restricted by IP also. As a consequence I think it's buttoned down quite tightly but, eventually, we plan to open this up to the Big Bad Web!!
What are your thoughts on the pro's and con's, the why's and wherefore's of one setting or another.
I'm hoping this thread will prove to be a good forum for discussing APEX application security configurations and a reference for others.
Please feel free to link to whitepapers of relevance.
Maybe someone could take up the challenge of producing an 'UNHACKABLE' :-) APEX website?
Simon.

Hi Simon,
If you're just talking about instance settings, then you might also add to that using the 3.1 runtime only instance.
If we're opening it up to application design, well...that's a whole other matter ;)
John.
http://jes.blogs.shellprompt.net
http://www.apex-evangelists.com

FDM Configuration - no option for 'Register with Shared Services'

Hi All,
I'm running the confiiguration for a new install of our Hyperion environment and when I run the configuration on our FDM server, the summary of tasks does not show 'Register with Shared Services'. We have installed this following the exact same steps as we did in a prior test environment and this option shows up fine in there.
Does anyone know how we can add this item to the configuration?
Thanks in advance.

Andy,
If they were truly identical then the option to register with HSS would be there.
Something must not be identical in the system.
Check the installation logs to verify that the Oracle/Hyperion software was installed properly.
Check with IT to ensure that the servers were built the same.
Thank you,

Security Settings for two admin groups with shared service

Similar Messages

Maybe you are looking for