Shared Services, create read access to a cube into an application us a grou

Hi,
I have an application with 3 cubes. I have created a group in Shared Services, and i want to give read access only to one cube.
If i give provision to this group , i only can give read to all the application, so all the cubes are going to have read access.
How must i do to give only read access to one cube and not to all,
Thnx
Guillermo

Hi,
This post will help answer your question :- Assigning database access using Shared Services
If you are using Shared Services access is applied at application level and you can't select individual access to each database.
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Regarding Shared Services and Essbase Access

Hello,
I am curious on few things regarding how Essbase and Shared services are interlinked.
Basically we have created Essbase Filters to limit the User access to specific entities , my concern is if a User is trying to Run a report or retrieve through Smart View and if they don't have access to any one of the list of Filter definitions say if there are X , Y ,Z entities in the Spread sheet for Smart View retrieval or in a report and the user does not have privilege for Z do they still get terminated from the entire Essbase Applications. I encountered similar type of problem with one of the users today.
Any comments.
Thanks !

Thanks for the reply Glenn , yes it should not get disconnected or have any connection issue. But below is what the error we get when using Essbase security filter.
**** Cannot Open Member Selection. Essbase Error(1001064):You do not have sufficient access to perform read on this database ****

Essbase to Shared Services "CREATE & DROP GROUP" SYNC?

Hi All,
Our Essbase security is externalized to Shared services.
But I am still designing the security to be done in batch mode using MAXL because of the bulk of provisioning.
When I run a
Create Group group99; (Native group)
It is created in Essbase & immediately reflects in Shared services without any refresh.
When I run a
Drop Group group99;
It is deleted in Essbase, but still remains in Shared services.
Is there a way to delete groups in Essbase & Shared services at the same time using MAXL?
Appreciate your thoughts.
Thanks,
Ethan.

Srinivas & Sandeep,
When I use
Alter group .......
after Drop Group (was successful)
I get an error saying group99 doesnot exist.
Is it possible to drop a native user or a native group in Shared services using MAXL?
It is so weird that we can create group in Shared services & Essbase at the same time using MAXL, but Drop deletes group only in Essbase.
Thanks,
-Ethan.

Reading data from an infocube into wd application

Hi,
How can we read data from an infocube.I have to read data from two infocubes and then display it in table in an wd application.
I have found an FM RSDRI_INFOPROV_READ to read , but how to use the same in wd application.

Hi Sanjeev,
Use CALL FUNCTION To use FM in WD.
something like this..
Declarations for BAPI_HU_DELETE_FROM_DEL
DATA : Del     TYPE BAPIDELICIOUSDELIVERY-DELIVERY_NUMBER,
         Return1 TYPE TABLE OF BAPIRET2.
del = lv_imp_outdel.
DATA : HUKEY    TYPE BAPIHUKEY-HU_EXID,
         wa_hukey TYPE BAPIHUKEY-HU_EXID.
loop at lt_pack_mat into ls_pack_mat.
wa_hukey = ls_pack_mat-HANDLING_UNIT.
MOVE wa_hukey TO hukey.
endloop.
Calling BAPI_HU_DELETE_FROM_DEL
CALL FUNCTION 'BAPI_HU_DELETE_FROM_DEL'
    EXPORTING
      DELIVERY = del
      HUKEY    = HUKEY
    TABLES
      RETURN   = Return1.
Commit Work
CALL FUNCTION 'BAPI_TRANSACTION_COMMIT' .
Chers,
Kris.

Unable to use the Assign Access Control feature in shared services

Hi,
When I try to right click on the essbase applicaiton in Shared Services to assign access control( to assign a new filter) I keep getting the following error
" Internet cannot display the webpage" message with the following
This problem can be caused by a variety of issues, including:
Internet connectivity has been lost.
The website is temporarily unavailable.
The Domain Name Server (DNS) is not reachable.
The Domain Name Server (DNS) does not have a listing for the website's domain.
There might be a typing error in the address.
If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section
All the services are running file and I can create new users/ groups and also perform appication migration.
I'm using Hyperion 11.1.3.24 on windows 2003 r2.
Any help is appreciated. Thanks.
Regards

vs wrote:
John,
I tried the refresh button and nothing appears. I have created a group and gave it filter access. Now I'm trying to attach that filter to the group.
Appreciate your help.Can we replace backup .sec file for shared services?
For example: In planning if the .sec file corrupted then we replaced with old .sec file...rite...the same way can we do it in shared services?
I know if we replace the old sec in planning...it will take old securities only...
Edited by: Prabhas on Feb 12, 2013 9:27 PM

Problem with Business Rules access from Shared Services

Hello,
When trying to access Business Rules from Shared Services (expand Business Rules and click on the application) I get the "Refer to the Security Guide to configure security permissions for this application" message, but the user is fully provisioned for Business Rules. It happens even logged on as admin. Access from Administration Services works fine. The version Hyperion system 9 (9.3.0.1). What is wrong? Help, please.
Thanks,
Timur

You can't access Business Rules from Shared Services. This is no different from any other application - Planning, Essbase, etc. You can provision users to the application roles, but you can't actually do anything with the application, other than security, in Shared Services. You use Admin Services to maintain Business Rules.

Assigning database access using Shared Services

I need to be able to assign security to a specfic database within an application. We have an application that has two databases. I provisioned the necessary group to the correct application to give them access. However, I only want that group to be able to see one of the two databases. How do assign security using Shared Services to provision access to just that database and not the other.
Thank you very much for your help.
Info:
Version of Shared Services - version 9.3.1

So I am going to answer my own post just incase anyone else is wondering the answer. I found the information right out of the hyp_security_guide.pdf - Security Administration guide. It states that - In Shared Services, if an Essbase application contains multiple databases, the databases must have the same user security access levels.
This is just my two cents, but I would think this might be something you would consider adding to Shared Services in future releases.

How to give planners read only access to Planning cube for ad-hoc analysis?

Hi Everyone,
I am trying to issue smartview reports to the planners. Most of the reports are coming off Essbase (reporting) application. However, we have to generate one report from planning server because of the text fields. Currently, on planning server, planners have access only to the forms. They dont have access to the planning cube. But to make them able to refresh this report, we need to give them access to the planning cube.
But we dont want them to do ad-hoc data write on planning cube. So my question goes like this - Is there a way for planners to have write access on the web forms but only read access to the cube through samrtview ??

The access permissions will match between planning and smart view if a planning connection is used.
Cheers
John
http://john-goodwin.blogspot.com/

WMI Read access to my one service account

Hi
I need to provide my one service account READ access on all windows 7 /servers 2003,2008,2012 in my domain.
I found below article, but this is not for read access..
http://blogs.msdn.com/b/spatdsg/archive/2007/11/21/set-wmi-namespace-security-via-gpo-script.aspx?PageIndex=2#comments
Please help me to achieve it..
Thanks in advance.

Hi Mr.Raj,
Since solving this issue requires WMI scripting skills, I suggest you refer to The Official Scripting Guys Forum to get professional support:
The Official Scripting Guys Forum
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
Thank you for your understanding and support.
Best Regards,
Amy

Problem assigning Essbase Security filters in Shared Services

We recently upgraded Planning/Essbase to System 9 version 931 in Test. Everything went smoothly except for few users Security didn't migrate properly.
In Shared Services, it shows that user has access to Planning & Native Essbase Applications. But in Essbase, only Planning Application access is shown.
Also when I try to apply security filters for these users in Native Essbase Applications (in Shared Services), I don't see these particular users.
There is no problem with Planning security, except when I refresh Security from Shared Services in Analytic Admin Console it wipes out Planning Application access in Essbase.
For other users there are no issues. Only for few users this is the problem. I have tried to deprovision user & provision back, but no use.
Please Help

Essbase/Planning security is multi tiered. In Shared Services you setup your groups. You provision your groups with adequate security access. Depending on whether you have updated a cetain .css file(to fix bug) you may have to assign the read, write calc access to the group not just calc, but all three if your users need the access to actually, read, write & calc. of need user to just read & write etc... then you have to go to EAS refresh, run maxl script to assign environment access to user, go back to shared services go into projects assign any needed access to calc & filter groups and essbase is setup. For planning you also have to go to workspace and migrate identities within the security setup for any of your dimensions. this comes into play when adding or removing users as filters are created in planning workspace. I just learned this from one good tech that helped me setup & remove users as I had issues getting them in and out of the system..Now to move on to actually getting security reports that make sense for planning with the associated access. If anyone has the maxl code let me know.

MSAD Configuration with Shared Services

Hi,
I have just sucessfully configured MSAD to the HFM SS but 1 concern is that anyone with the domain suer login is able to login to shared service although limited function are available. Is there anyway to control other users except my users to login?
I do not want to use Native to create user as it will means another set of password to rememberr for the users, would prefer they use their normal domain accoutn to login.
Thanks

In addition to other comments, users can only make changes in Shared Services if they have Shared services roles assigned. Also, we use MSAD with both local and AD groups, and as long as you know the effective rights, it works out fine either way. The Shared services roles are listed below (Security Administrator's Guide pp 135-136):
Administrator: Provides control over all products that integrate with Shared Services. It enables more
control over security than any other Hyperion product roles and should therefore be
assigned sparingly. Administrators can perform all administrative tasks in User
Management Console and can provision themselves.
This role grants broad access to all applications registered with Shared Services. The
Administrator role is, by default, assigned to the admin Native Directory user, which is
the only user available after you deploy Shared Services.
Directory Manager: Creates and manages users and groups within Native Directory.
Do not assign to Directory Managers the Provisioning Manager role because combining
these roles allows Directory Managers to provision themselves.
The recommended practice is to grant one user the Directory Manager role and another
user the Provisioning Manager role.
LCM Manager: Runs the Artifact Life-Cycle Management utility to promote artifacts or data across product environments and operating systems
Project Manager: Creates and manages projects within Shared Services
Create Integrations: Creates Shared Services data integrations (the process of moving data between
applications) using a wizard.
For Oracle's Enterprise Performance Management Architect, creates and executes data
synchronizations.
Run Integrations: Views and runs Shared Services data integrations.
For Performance Management Architect, executes data synchronizations.
Dimension Editor ( includes Dimension Viewer and Interactive Editor):
Creates and manages import profiles for dimension creation. Also, creates and manages
dimensions manually within the Performance Management Architect user interface or the
Classic Application Administration option.
Required to access Classic Application Administration options for Financial Management
and Planning using Web navigation.
Dimension Viewer can read or view dimensions. This role automatically maps to the
Dimension Reader access on dimensions.
Interactive Editor can modify members within a dimension, and grants dimension writer
access to all dimensions. Does not allow users to delete dimensions.
Note: Dimension Viewer and Interactive Editor roles are reserved for future use.
Application Creator (includes Analytic Services Application Creator, Financial Management Application Creator, Planning Application Creator, External Application Creator): Creates and deploys Performance Management Architect applications. Users with this
role can create applications, but can change only the dimensions to which they have
access permissions.
Required, in addition to the Dimension Editor role, for Financial Management and
Planning users to be able to navigate to their product’s Classic Application Administration
options.
When a user with Application Creator role deploys an application from Performance
Management Architect, that user automatically becomes the application administrator
and provisioning manager for that application.
The Application Creator can create all applications.
The Analytic Services Application Creator can create Generic applications.
The Financial Management Application Creator can create Consolidation applications
and Performance Management Architect Generic applications. To create applications,
the user must also be a member of the Application Creators group specified in Financial
Management Configuration Utility.
The Planning Application Creator can create Planning applications and Performance
Management Architect Generic applications.
The External Application Creator can create external views and export application views
but cannot export the library.
Note: External Application Creator role is reserved for future use.

Shared Services Configuration/Deregesration problems

Hi All, We are using Soalris OS, 64 bit server. I have isntalled EPM 11.1.1.2 , Shared Serives, ESA in that machine also I have configured the Essbase, EAS with shared services. Now we wanted to downgrade our applciaons to use system 9 as theere are issues with cognos connecting to EPM 11. So I have uninstalled EPM Essbase, Shared services (i did not find any option for deregister applications), EAS. Then I have installed Essbsae 9.3.1.3 , Shared services, Congigured successfully. But I cann see all my applications/Cubes that are created in 11 in the shared services projects tab. I was not able to delete them from the shared services. Please advis the best way to configure the Esbase system 9 in already installed and uninstalled EPM system.
Thanks in advance
Subrahmanyam

I add that the URL http://srvname:28080/interop/index.jsp is available but with an error message.
Thks.

Reg: Hyperion Upgradation from 7.1.x to 9.3.x and Shared Services...

Hi Everybody,
New to this forum and i want to know about upgrading the essbase from 7.1.x to 9.3.x...As i gone through PDF, it is mentioning as upgrading of 9.3.x from earlier versions prior to release 9.2.x cannot be done directly...Here comes with the migration/upgradation topic wherein... Can we go ahead and install essbase 9.3.x on new box and migrate app's / db's from 7.1.x old box?
One more thing is like...if we are using External authentication using LDAP in 7.1.x version for security....will it be mandatory to implement shared services separately in system 9 or continue with native security mode without installing shared services...I have only essbase and no other tools implemented...
Hope u guys understand my queries!...If any body can explain on these two aspects...will be of great help to me...
Thanks for the help in advance!!

Hi,
You will have to migrate the Essbase server from 7.1.2 to 9.3.1
The steps you will follow are as below: --
1. Configure Essbase on new environment, 9.3.1 by using the same user as on 7.1.2 [THIS IS AN IMPORTANT STEP, TO MIGRATE SECURITY]
1. Take data exports of all application/databases in old environment
2. Take backups of all Essbase objects, including essbase.sec in old environment. Take security file backup after stopping Essbase 7.1.2
3. Create the applications/databases with same name in new environment 9.3.1
4. Copy the outlines and open outline in EAS in 9.3.1 and save them again.
5. Copy all objects, rules, reports, calc for all applications.
6. Stop essbase, Eas in new environment and copy security file from old environment to new environment Take backup of Essbase.sec on new environment
7. Start Essbase 9.3.1
8. Validate all databases using Esscmd "validate" command
9. Reimport all data and run default calc on all applications.
10. Now, you have the security in new Essbase server, as in old environment
11. Externalize the security in EAS.
Caution: When you migrate to Shared Services, Essbase users and groups are converted to equivalent roles
in Shared Services. Shared Services creates a superuser with the user ID named “admin,” which
is read-only. If Essbase contains a user ID named “admin”, that user ID cannot be migrated to
Shared Services. Before migrating, change the “admin” user ID (for example, from “admin” to
“asadmin”).
It is not compulsory to use shared services with Essbase 9.3.1, if you have Essbase only.
but since it the way to go, you will have to migrate your essbase security to shared services.
Let me know if it helps, by defining the reply as answered, Helpful or correct.
Cheers
RS

Essbase Application Doesn't show up in Selected Roles in shared services

Hello all,
I have few essbase applications which donot show up in the"Selected roles" column in Shared services though the user has been provisioned with the application. Infact the provisioned users can access the application based on the provisioning, but just that I as an administrator donot see it there in the selected roles department. Again this is only in "Selected roles" column meaning I can see it in the "Available roles" column. The application has been registered in EAS and I have also refreshed the security in EAS. We are on 11.1.1.4. Any ideas anyone?
Thanks,
Ted.
Edited by: Teddd on Jan 10, 2013 9:43 AM

Working with Oracle on it, they think it is a bug.

Planning Appl not able to register and unregister with shared services

Hi All,
I created a planning application before that I created a datasource. After crearting an application I got an error as Application not able to register with shared services .
And also I am facing one more issue that is if I delete any particular planning application at that time I got an error as Application not able to unregister with shared services.
I am able to open the planning application through http://<planningmachine>:8300/HyperionPlanning/AppWizard.jsp and its working fine. I am able to open the Shared Services though Workspace but I am not able to find the option for planning application.
Kindly guide me how to overcome it.
Thanks and Regards
ChiDam

Have you checked the logs? Found something?
This normally happens when there is issue with Planning app and cluster mapping. For some reason, the application maps to non-existent cluster in Planning system schema resulting in failure of HSS registration. you can manually re associate the cluster using configuration tool and try registering again.
Cheers..!!

Shared Services, create read access to a cube into an application us a grou

Similar Messages

Maybe you are looking for