Shared Services access to Essbase cubes

I'm having several problems with user access to Essbase (non-Planning) cubes. The first problem is that I have granted Read access to the users (using a group) to these Essbase cubes in Shared Services. The security has been refreshed, and if you view the properties of any of the databases to which I've granted access, it shows that the group has read access. However, the users do not see these applications in Smart View Data Source Manager. Does anyone know why they are not showing up in Smart View? Using my own id, I added all of these applications to the pre-defined view, and if the users use the pre-defined view, they can see the databases, but if they try to connect it says they don't have access.
The second issue is that only the Essbase cubes that existed at the time that we upgraded to version 11 are showing up in Shared Services. We have since created several more cubes, but I am unable to get them to show up in Shared Services. What am I missing? Shared Services Help is not particularly helpful in either of these instances.
Thanks,
Sabrina
P.S. Just venting, but I hate Shared Services.

John,
I have two problems with your suggestion. The first is that when I go to the "Assign Access Control" page, I can't select users/groups, but can only select users. I could do each user separately, I suppose, but doesn't that sort of defeat the purpose of having groups? I'm on version 11 - do you know of any reason why I can't choose groups at this point?
My second problem is that I can't set them as essbase/planning users, if by that you mean there should be a choice that is both. I can do either one, but not both together. They are currently set to Planning. Will it mess anything up with their Planning access if I set them to Essbase?
Thanks,
Sabrina

Similar Messages

Shared services- Access Assign issue for Essbase

Hi All,
I need to associate Filter with a group in Shared Services, but when I go to Application Groups, right click on the Application name and select "Assign access control", but in the list of Groups that come in the very first window, i dont see all the grousp listed there, has anyoen seen thsi issue before and knows teh fix for it?

We dont have direct Role provisioning to teh groups. Here we actualy have a group AllUsers and have added all other grousp as "GRoup membere" to thsi group/ Now this AllUsers group has teh roel provisioned to it. So in such a case, to see the grousp listed under "Assign Access Control" do they need to eb provisioned individually as well at group level, or teh above scenario that I mentioned also works fine?

Shared services Access

dear All,
I have given access to user in Shared services as administrator for Planning application but he is still able to see calculation manager and is able to open EAS console as well.
Please suggest me , I want to give access to Only Planning application full access not to EAS or calc manager.
Thanks,
KK

He'll be able to see only Planning application in EAS. If not you've to go back and check his provisioning.
Regards
Celvin
http://www.orahyplabs.com

Shared services security and essbase security

recently upgraded to sys 9 and now use shared services 931
we used to have security at essbase level previously and now its all Shared services..
now i have so many concerns
Can we automate the security just like I used to automate in essbase earlier...
or can we automate secuirty in essbase and them sync it to Shared services??
I know that we change security settings in SS and then sync it to essbase but is the other way around possible???
IF yes HOW?
IF NOT - can we automate SS security which reflects to essbase...
I have to go through the prod doc and I'll do that very soon but any suggestion on this would really help me out..
Thanks in advance

Hi,
can you please write more about which products and version are you using and on which operating system name and version.
Why do you use Shared Services? Are you using only Essbase server or any other server? If you use only Essbase server there is probably no need of using Shared Services.
If you need only Essbase you can see my info about installing Essbase without Shared Services: hyperion essbase installation
Please provide more info, so that we on forum can help you.
Regards,
Grofaty

Shared services access issue

Hi ,
I created sample user's under Native directory and assigned some groups to them. When i tried to verify their roles from Sample-->(R.C) Provision--> ... i don't see any roles, the roles from right side is blank. But when i login with the sample user in to workspace, i can see he is having all the access from his group. And when i am trying to assign security classess "Assign access control", i can 't able see the sample user's. But i can see other Native directory user's created befor and LDAP user's. Can anyone tell me how the system is behaving like this.
Thanks,
Ven

And when i am trying to assign security classess "Assign access control", i can 't able see the sample user's. But i can see other Native directory user's created before and LDAP user's. Can anyone tell me how the system is behaving like this?
The answer is
Go to users and click on search all ,then we can see all the users and next step is provision them with the role, application administrator...and return to the application -right click -asign access control.when we click on users and say show all---all the users can be seen...
Just give a try....

Externalise users to Shared Services fails

I recently tried to Externalise users to Shared Services. However, when I attempted to do this, I received the following error:
[Thu Nov 13 15:29:12 2008]Local/ESSBASE0///Error(1051449)
Analytical Services failed to get group with Error com/hyperion/css/spi/util/CSSGroupComparator
I tried to Externalise again and then I received this error:
[Thu Nov 13 15:33:20 2008]Local/ESSBASE0///Error(1051449)
Analytical Services failed to get group with Error [CSS Error: Invalid Argument: Principal passed is NULL]
And also, now whenever I tried to add a new user to Essbase thats authenticated externally, I receive this error:
[Fri Nov 28 16:56:20 2008]Local/ESSBASE0///Error(1051223)
Single Sign On function call [css_getUser] failed with error [CSS Error: Invalid Argument: Principal passed is NULL]
Note, it did partially succeed in externalising to shared services, as the Essbase Cubes & Project to appear.
Does anyone have any ideas on how to resolve these errors and successfully externalise to shared services?
Edited by: user2062993 on 30/11/2008 19:32

I have a similar situation at my end.
reconfigure EAS console as from the configuration utility or mere editing the properties of the administration server will do.
I tried editing the properties in the administration server but it dint help so should i go and reconfigure the EAS from the configuration utility .

Shared Services, create read access to a cube into an application us a grou

Hi,
I have an application with 3 cubes. I have created a group in Shared Services, and i want to give read access only to one cube.
If i give provision to this group , i only can give read to all the application, so all the cubes are going to have read access.
How must i do to give only read access to one cube and not to all,
Thnx
Guillermo

Hi,
This post will help answer your question :- Assigning database access using Shared Services
If you are using Shared Services access is applied at application level and you can't select individual access to each database.
Cheers
John
http://john-goodwin.blogspot.com/

Essbase security sync issue with Shared Services v 11.1.2.2

Hi,
We are using Essbase version 11.1.2 (ESB11.1.2.2.102B025) and shared services version 11.1.2.2.300.6001 (Drop 6)
Foundation Services is on a cluster evironment, windows 2008 64 bit.
Essbase is on Unix Sun Solaris.
We encounter an issue in which each time a new user is added to a group.
The user will not have immediate access to Essbas. Currently the only time the
user will have access is when we restart essbase.
Is there a way to sync users from Shared Services without restarting Essbase?
Anyone has experience on this problem and may know what and where to look?
This is the error the user get, even though the group has access to essbase cube and the user
has been added to the group.
[Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1055126)
This user has no application access set. Please contact your system administrator
[Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1054067)
Internal error
[Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Error(1051293)
Login fails due to invalid login credentials
[Thu Jun 27 16:22:18 2013]Local/ESSBASE0///79/Warning(1051003)
Error 1051293 processing request [Login] - disconnecting
There is no issue if we provision the user directly to the cube, e.g. without using group.
Please advise. Thanks.

You shouldn't have to restart Essbase as it should automatically sync, there may be additional information in SharedServices_Security_Client.log though it is probably worth logging with Oracle.
Cheers
John
http://john-goodwin.blogspot.com/

Essbase system9 Shared Services configuration

Hi posting again.... :-)
I was wondering if someone could shed some light on a few strange things that have been happening in my wonderfull world of migratin from Essbase 7.1.5 to sys 9.3.1.
I have installed of the foundation server software on one server and the essbase server on another. I have gone to configure both shared services and then essbase and im using the defualt admin account 'admin' and 'password' for password. this is just really a dry run through, but i have been reading that this ais a no no, just wondering if anyone can shed some light on this. Also i have configured Shared services to pick up our AD accounts. I have configured essbase server and i externalised my users to shared services.... i have had a few problems, because as soon as i externalise my native users i am unable to use my AD users in shared services?? a little lost and when i sign back into AAS (EAS) i can hook up to the application server but when i assign the essbase server it says the user credentials are invalid??
any help would be great
Thanks
Eddie

Hi, i have managed to get my users externalised to SS and all is working fine concerning users accessing my essbase server through Excel using there MSAD accounts etc. I have however come accross a strange error? When i log into the SS admin consol with any of my admin accounts, when i click on projects and then say one of my essbase applications that i have an MSAD group provisioned to it wont show up in 'Assign Access Control' window? Currently the user directory structure is Native then MSAD when i flip these to MSAD and Native then restart the service the MSAD groups appear in the'Assign Access Control' window but the Native admin and test groups no longer appear??? am confursed a little with this as i have both Native groups that are there to control my automation from my TPS and SQL and i have MSAD groups that contrain provisioning for my user base. This really only effects SS consol as when i log into AAS (EAS) i am able to see both group types and they appear to be working together. is there any way i can see both group types in the 'Assign Access Control' window? also i have left the user directory in MSAD then Native, is this recomended?
Any help would be greatly appreciated
Eddie

Issue externalizing the Essbase security to shared services

Guys,
I am facing an issue while externalizing the security to shared services in Hyperion Essbase 9.3.1. When i tried to externalize the users in Essbase 9.3.1, i am getting the error
"Error: 1051400: Analytic Services has already been migrated to Shared Services Mode". But i dont see any options when i right click on the security tab. i am seeing the same options
as we have before migrating to shared services like Externalize Users. Also when i tried to create a user in Essbase, it is giving the following error msg.
"Error: 1051484 Cannot change CSS Authenticated User to Another Authentication Type After successfully migrating that user to Shared Services". Errors are showing my security is in shared
services mode. How i can test if it is really in shared services security mode.
One other thing is, when we installed Essbase, we used 'admin', 'password' as user credentials. Does these have anything to do, as i saw in one thread that 'admin' is not recommended for Essbase while configuring shared services.
Thanks in advance
PM

Forget this thread. I am able to rectify the issue. We forgot to give access to temp folder of EAS Console.

Assigning database access using Shared Services

I need to be able to assign security to a specfic database within an application. We have an application that has two databases. I provisioned the necessary group to the correct application to give them access. However, I only want that group to be able to see one of the two databases. How do assign security using Shared Services to provision access to just that database and not the other.
Thank you very much for your help.
Info:
Version of Shared Services - version 9.3.1

So I am going to answer my own post just incase anyone else is wondering the answer. I found the information right out of the hyp_security_guide.pdf - Security Administration guide. It states that - In Shared Services, if an Essbase application contains multiple databases, the databases must have the same user security access levels.
This is just my two cents, but I would think this might be something you would consider adding to Shared Services in future releases.

Essbase server not listed in Shared Services

Hello,
Installed and configured 11.1.2.3 successfully on Windows Server 2008R2.(Essbase, Planning and WebAnalysis)
In Shared Services it is showing Shared Services, Studio and Reporting only.
Its not showing Essbase. I just gone through essbase log and deleted essbase.sec file and again configured but no use, still its not showing. after that restarted the system also.
I am able to login to EAS console, i can create users in essbase but not in EAS. create and disply user options are greyed out.
Can you please let me know how to resolve this issue?
Thanks,
Prathap

Hello John,
Its not standalone installation. Below error log for yesterday.
[Tue Jul 16 08:30:07 2013]Local/ESSBASE0///2212/Error(1051683)
Attempt to retrieve connection information from the registry failed. Please check reg.properties file and try again.
[Tue Jul 16 08:30:08 2013]Local/ESSBASE0///2212/Info(1056797)
Incremental security backup started by SYSTEM. The file created is [C:\Oracle\Middleware\user_projects\epmsystem1\EssbaseServer\essbaseserver1\bin\ESSBASETS_1373988608.BAK]
[Tue Jul 16 08:30:08 2013]Local/ESSBASE0///2212/Info(1051051)
Essbase Server - started
[Tue Jul 16 08:30:08 2013]Local/ESSBASE0///2212/Error(1051549)
Can not convert Essbase to Shared Services mode when Essbase is not configured with Shared Services or the initialization process has failed
[Tue Jul 16 08:30:08 2013]Local/ESSBASE0///2212/Warning(1056822)
Failed to migrate Essbase to HSS security mode during startup. Check SharedServices_Security_client.log. May need to remove essbase.sec and any of the newly migrated Essbase applications from HSS, then rerun configuration tool.
[Tue Jul 16 08:30:08 2013]Local/ESSBASE0///2212/Info(1056800)
Validation of back up file [C:\Oracle\Middleware\user_projects\epmsystem1\EssbaseServer\essbaseserver1\bin\ESSBASETS_1373988608.BAK] completed with status 0
And today removed essbase.sec and reconfigured... and in log it is showing
[Wed Jul 17 00:43:43 2013]Local/ESSBASE0///2236/Info(1051283)
Retrieving License Information Please Wait...
[Wed Jul 17 00:43:43 2013]Local/ESSBASE0///2236/Info(1051286)
License information retrieved.
[Wed Jul 17 00:43:43 2013]Local/ESSBASE0///2236/Info(1051227)
No JVM location specified in essbase.cfg. Will try to load from library path
[Wed Jul 17 00:43:44 2013]Local/ESSBASE0///2236/Info(1311019)
Classpath during JVM initialization: [;C:\Oracle\Middleware\EPMSystem11R1\common\jlib\11.1.2.0\epm_j2se.jar;C:\Oracle\Middleware\EPMSystem11R1\products\Essbase\EssbaseServer\java\essbase.jar;C:\Oracle\Middleware\EPMSystem11R1\products\Essbase\EssbaseServer\java\essbaseRegistry.jar]
[Wed Jul 17 00:43:56 2013]Local/ESSBASE0///2236/Error(1051223)
Single Sign On function call [css_init] failed with error [CSS Error: CSS method invocation error: getInstance: Failed to get CSSSystem instance, please check SharedServices_Security_Client.log for more information]
[Wed Jul 17 00:43:56 2013]Local/ESSBASE0///2236/Info(1051198)
Single Sign-On Initialization Failed !
[Wed Jul 17 00:43:56 2013]Local/ESSBASE0///2236/Info(1056815)
Essbase 64-bit - Release 11.1.2 (ESB11.1.2.3.000B4412)
[Wed Jul 17 00:43:56 2013]Local/ESSBASE0///2236/Info(1051232)
Using English_UnitedStates.Latin1@Binary as the Essbase Locale
[Wed Jul 17 00:43:56 2013]Local/ESSBASE0///2236/Error(1051683)
Attempt to retrieve connection information from the registry failed. Please check reg.properties file and try again.
[Wed Jul 17 00:43:57 2013]Local/ESSBASE0///2236/Info(1056797)
Incremental security backup started by SYSTEM. The file created is [C:\Oracle\Middleware\user_projects\epmsystem1\EssbaseServer\essbaseserver1\bin\ESSBASETS_1374047037.BAK]
[Wed Jul 17 00:43:59 2013]Local/ESSBASE0///2236/Info(1051051)
Essbase Server - started
[Wed Jul 17 00:43:59 2013]Local/ESSBASE0///2236/Info(1056800)
Validation of back up file [C:\Oracle\Middleware\user_projects\epmsystem1\EssbaseServer\essbaseserver1\bin\ESSBASETS_1374047037.BAK] completed with status 0
[Wed Jul 17 00:44:21 2013]Local/ESSBASE0///3544/Info(1042059)
Connected from [fe80::6963:3165:951c:f79d]
Thanks,
Prathap

Cannot register Essbase on Shared Services 9.3.1

Hi,
I'm trying to register Essbase on Shared Services but I get an error message on the log "
Failed to authenticate user = admin". Essbase and Shared Services are on different boxes. I have installed Planning and Shared Services on the same box, and I'm able to register the Planning with SS. I have checked that I can see the Shared Services Server on Essbase server and I have checked that I'm using the correct host server name for Shared Services when I try to register Essbase, but it doesn't work. Also I have tried to create a new user on SS and provision with admin rules, but it didn't work neither. Any ideas?
The environment is Windows 2003/Tomcat/SQL Server 2005.
Thank you,
Glaucia

Re: Unable to Externalize users to Shared Services

Accessing Essbase cubes within a HP application using Essbase add-in

Hi All,
I've been told in the past by Oracle Support personnel that accessing the Essbase cubes within a Planning application using the MS Excel Essbase add-in is "a very bad idea" and that such an approach "is not supported\recommended by Oracle due to potential issues" (which the support person could not tell me about).
Unfortunately, I have not found any information in the Planning documentation which supports or not this recommendation.
As such:
1. Could anyone point me in the right direction in terms of finding out whether it is recommended\supported (or not) for users to access Essbase cubes within a Planning application using the Essbase add-in?
2. Has anyone ever experienced issues accessing Essbase cubes within a Planning application using the MS Excel Essbase add-in? If yes, what were these issues??
PS: We are on v9.3.1.x of Essbase\Planning and will be moving over to v11.1.2.x in the next 6-8 months.
Thanks in advance,
JBM

Hi Rob,
Thank you for your prompt & informative response.
On the topic of metadata, I am aware of what happens when changes are made directly to an Essbase outline which falls under a Planning application without going following the proper method ... and I agree that it ain't pretty! :-)
On the topic of locking\sending data to the Essbase cubes within a Planning application, I also understand that it works quite well in as much as the data is saved in the appropriate intersections within the Essbase cube, as permitted by the security assigned to the user.
I was more interested in whether such a practice of locking\sending data directly to Essbase cubes within a Planning application was actually encouraged or discouraged by Oracle.
And please correct me if I am wrong but from what you are saying, it seems to me that it is neither as:
- on one hand, the "Essbase Write" HSS feature allows administrators to create security groups and assign this type of provisioning to security groups in question;
- on the other hand, Oracle Support seems to be verbally discouraging such a practice for no real reasons related to technological limitations;
The problem that I have is that because some users at our site know that they can lock\send data to Essbase cubes within a Planning application and as a result, not only want to get us to grant similar lock\send access to other users but are now more reticent than ever to move away from the Essbase add-in as a means to load\submit data to a Planning application. And that's why I was after some formal recommendation from Oracle as to whether it is a recommended practice or not.
Anyway, any suggestions would be much appreciated.
Regards,
JBM

Hyperion - Shared Services (Can I restrict a user based on a member?)

In the Shared Services Management Console can I restrict a users access to only certain members in a dimension?
Example: If someone is trying to retrieve data in excel from Hyperion can I restrict that users information to only their geographic market?

To expand on what SeanV told you, Filters are not created in Shared Services, but in Essbase (EAS or MAxL). They are however applied in Shared services

Shared Services access to Essbase cubes

Similar Messages

Maybe you are looking for