Shared Services, Export Security on dimensions set in Planning

We have migrated everything from Planning version 9 to version 11.
Using Shared Services we are been able to transfer all users and groups.
By now we have to transfer also the security set on dimensions within Planning.
With Life Cycle Management we are been able to migrate everything except those dimension security setting sofar.
Has anyone the same experience and/or can help us with a workaround.
regards,
Ed

Well, have you looked at the Planning utility ExportSecurit.cmd? It works just fine in 11.1.2.1 as well as older releases.
I had (or I should say my client had) an install issue with SS where LCM security migrations didn't work.
ExportSecurity pulled everything out and I was able to migrate across environments without issue.
The docs for it are in the Planning admin guide.
Regards,
Cameron Lackpour

Similar Messages

Hyperion Shared Services Import security files where to define roles-11.1.2

Hi,
I want to create the shared services security import file. Do anyone knows where to define the group or user roles for it. Earlier we have to changes in CSImportexport.
Now in version 11.1.2.1 things are different.
Do anyone knows about it.
Thanks!!!!

Thanks for the reply.
I am taking export only first and this is what i got from export, if you see below under role id there are some codes generated internally, if I have to give any group different roles like planner, application creator, interactive user... where in csv file I can define those.
#provisioning
project_name ----------     application_name     -----role_id     --------------------------------------------------------------------------------------------- product_typ--------user_id-------     user_provider
Default Application Group---     CPSPlan-----     native://DN=cn=HP:0003,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE--     HP-11.1.2.0-------     admin--------Native Directory
Default Application Group---     CPSPlan-----     native://DN=cn=HUB:2,ou=HUB,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE---     HUB-11.1.2.0-----     admin--------Native Directory
Default Application Group---     CPSPlan-----     native://DN=cn=HP:0001,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE--     HP-11.1.2.0-------     devusr-------Native Directory
Default Application Group---     CPSPlan-----     native://DN=cn=HP:0001,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE--     HP-11.1.2.0-------     OMBUsr-----     Native Directory
Default Application Group---     CPSPlan------native://DN=cn=HP:0003,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE--HP-11.1.2.0-------     processadmin-----     Native Directory
Regards.

Where is the Shared Services user security stored?

On Hyperion Planning 9.3. I can view the security of my users/groups via the report in Shared Services, yet I would like to put the output in Excel and there is no option other than Print/Print Preview.
which repository database contains the Shared Services security?
Thanks
JTS

Hi,
If you are talking about the security to members, forms then this is held in the planning application database.
If it is provisioning of the application then it is a combination of the Shared Services database and OpenLdap database. (not so easy just to create a report on the provisioning by looking at the database)
Cheers
John
http://john-goodwin.blogspot.com/

Error : LDAP Error code 32 - in shared services export operation

Hi everyone !
I m using MS Active Directory in my Shared services for external authentication.
while exporting provisioning for all users against project:applications , it is not working
Trace error is :
2010-05-26 16:43:58,988 Export : Root cause : [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=NJ - Users,OU=CLI - NJ,DC=cli,DC=ad'
suggestions are highly appreciated
Thank you
Edited by: user11966901 on May 27, 2010 2:43 AM

Below is the solution we got when we had kind of same issue:
Steps To Reproduce:
Install the OIM AD base connector version 9.1.0
Upgrade the Connector to OIM 9.1.0.1 version using Patch 7553764
Provision a user from OIM to AD.
Cause
The OIM 9.1.0.1 patch contains a fix that can handle special characters in the process form. But there is special character like hyphen (-) in Root Context value (for example: 'OU=X-Test OU,DC=mydomain,DC=com' ) inthe IT Resource it causes provisioning to fail.
Solution
In this case the user is being provisioned to a Organization called 'X-Test OU' under the mydomain.com domain in the AD. There is Lookup called 'Lookup.ADReconciliation.Organization' which is populated using the Schedule task called "AD Organization Lookup Recon". This lookup is also used in the AD User
Process Form for populating the Organization Field.
-- To implement the solution, please execute the following steps::
Edit the Root Context value in the IT Resource to point above the OU=X-Test OU organization. So it looks like dc=mydomain,dc=com.
Run the Schedule task called "AD Organization Lookup Recon" by providing dc=mydomain,dc=com value to Search Base parameter in the schedule task. This recon would populate the 'Lookup.ADReconciliation.Organization'.
Now provision a user to AD resource and in the process form selected the OU=X-Test OU as the Organization.
This way the user gets successfully provisioned and gets created under the 'OU=X-Test OU,DC=mydomain,DC=com'
Cheers....!!!

Hyperion Shared Services Export

Hello All,
I need to export Hyperion Shared services, I know about CSSEXPORT.bat utility but i am not sure how to run, we are using Hyperion Planning, Essbase FDM APS, Smart view, FR and some other tools and I need to export either in xml file or CSV, if is there any other option i can use or how i can run from CMD prompt. We used Hyperion System 9.3.1
Any help would be great.
Thank you,
T.Khan

You can call CSSEXPORT.bat script using following statement
Call CSSExport.bat importexport.properties
Make sure your importexport.properties file is present in the same location as CSSExport.bat files
format of importexport.properties file needs to like this
Send me your email id and I can send you a document on import/export utlity for version 9.3.1
#import export operations
importexport.css=file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/
config/CSS.xml
importexport.cmshost=localhost
importexport.cmsport=58080
importexport.username=admin
importexport.password={CSS}MRcYv323uzxGr8rFdvQLcA==
importexport.enable.console.traces=true
importexport.trace.events.file=trace.log
importexport.errors.log.file=errors.log
Import/Export Utility 3
importexport.locale=en
# importexport.ssl_enabled = true
# export operations
export.fileformat=xml
export.file=C:/exportNew.xml
export.internal.identities=true
export.native.user.passwords=true
export.provisioning.all=true
export.delegated.lists=false
export.user.filter=*@Native Directory
export.group.filter=*@Native Directory
export.role.filter=*
export.producttype=HUB-9.2.0
#export.provisioning.apps=(HUB=Global Roles)
# import operations
import.fileformat=xml
import.file=C:/exportNew.xml
import.operation=update
import.failed.operations.file=c:/failed.xml
import.maxerrors=0

Shared Services - LCM pointing to the wrong Hyperion Planning server

Hi,
I created 2 Planning applications and created a Shared Services application group called "Planning" where I assigned both during creation.
I navigated to the Shared Services console and went to the application group to check both. When I press any of them I get the following error:
EPMLCM-30053: Failed to connect to "http://<server name>:19000/HyperionPlanning/servlet/HspLCMServlet" while performing explore/listing for application - "FrcApp".
Received status code -"404" with error message - "Not Found". Possible cause of error Server Down or Not reachable.
The problem I'm having is that the <server name> that is appearing is not the one where Planning is, but the Essbase server. Where do I change this to correct the problem?
Thank you

Hi,
i think we need to register that application again.
goto the workspace, open the particular planning application then goto Administration --> Application --> Settings
There you find the Register with Shared Services.
Regards,
mady
please mark the replies with helpful or correct to help others

Hyperion Shared Services - Security in excel file

Hi all,
Is there a way that we can get security info in an excel format from Shared services and then we can play around with that excel file. Once changes are done, we import it back to Shared services.
We use active directory for user maintenance.
Regards,

They are stored in the Planning application and not Shared Services, export the access permissions from the planning applications using either LCM or the exportsecurity utility.
Cheers
John
http://john-goodwin.blogspot.com/

Security in shared services :not able to assining filters to the group

Hi all,
Iam getting the problem with assigning the filters to goups and users in shared services (our security is sharedservices mode), i refreshed the security
Its not showing any group for that cube ,,,, i gave the access to that group but iam not able to assign that filter to that group
wen i right clik on that cube , its showing page canot displayed, can any one face this issue
or any other utilitywe ahve to assighn filters to the group
Even I tried with maxl grant access but no use,
Plz help on this...
Edited by: user8815661 on 26 avr. 2010 04:36

If you're on Windows, edit the hosts file from: C:\WINDOWS\system32\drivers\etc & include the Essbase, Shared services servers

Planner provisioning for user groups lost in Shared services

Hi All,
Everything was fine. All of a sudden, no users were able to login in to planning.
On investigation it was found that all the planner/planning provision to the groups is lost in the shared services.
Digged into log for a while and couldnt find out any issues.
What could be the reason we lost user group security provisioning only to planning?
Could anyone please help on this?
Regards,
GG

I used to have same experience every time migration happens from dev to UAT or prod etc.
After migration, registering with shared service will be successful. When i try to sync, migrate user identities (provisionusers.cmd) from shared service all user group info vanishes in planning (Add/Edit access page). i.e hsp_access_control table is truncated or all rows are dropped.
Then i have to set it up correctly. Guess this happens because usergroups have different id between different environments. When sync'g planning at target, it will not be able to recognize the wrong usergroup id of source system.
My assumption:
When provisionusers.cmd is run, planning fetches the usergroup provisioning information from shared services in to hsp_access_control planning repository table. could someone confirm the same?
Is there any other way to overcome this issue recurring on every time migration happens?
But the problem today was different: the provisioning is lost in the shared services itself which i havent witnessed so far. We didnt migrate recently, everything was file till 8 AM, but screwed around 8.10 AM. everything was up and running.
Cheers,
GG

Sync User with Shared Services

I noticed that if I provision a user in shared services the user can not log into planning until I restart planning. Is there a way to do this without restarting planning? This also seems to happen with EPM.
I know this happens with essbase but you can put a few commands in the essbase.cfg file and it can either sync on a time basis or when a user logs into the system.

I am not sure what version you are using, but I will assume 9.3.1
If so you shouldn't need to restart the planning server, once you have set them up in HSS the user should be able to log into planning, once the newly created user logs into planning the user is also created on the essbase (EAS) side as a planning user.
If you set up a new user and then log into the planning app as an admin user, select a form and click assign access, then click add access, can you see the user in the list ?
Cheers

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Set up each Mac for Time Machine backups in the normal way. Time Machine will keep each backup separate on the Time Capsule, so users will only be able to see the backups of their own Mac.
Yes....there are convoluted workarounds that might allow one user to see the backups of another.....IF...they know the administrator password of the "other" Mac.
As far as Internet sharing, all users will have access to the Internet if they have a wired or wireless connection. If a Mac connects using wireless, it is possible to limit the time that they are allowed to connect to the network.
For example, you might limit the ability to connect to the wireless from say each Weekday from 8 AM to 6 PM.
With a wired Ethernet connection, you cannot limit access times to the Internet.

Shared Services Project - What does that mean?

When I create a Planning application from Workspace, there is a drop-down list for "Shared Services Project" in "Select" tab in "Create Application" wizard. What option should I select? Available options are:
1) Unassigned Project
2) APS 9.3.1 Servers
3) Business Rules
4) Hyperion System 9 BI+
5) Analytic Servers
6) the server where it hosts all Hyperion software
I've installed Hyperion Analytics Services, Analytic Provider Serivces, BI+ (reporting module), Analytic Administration Services. I've also externalized users in Analytic Services.
Does anyone know the differences between different options?
Thanks.

Hi,
You can go into Shared services and create a new project called "Planning" then when you register the planning app in shared services you can put it against the "Planning" project.
Cheers

Shared Services External Authentication using LDAP in 9.3.1

Hi,
I have installed Hyperion Shared Services with native directory. And now planning to setup external authentication using LDAP. I need some guidance to understanding how the external authentication works.
Questions:
1. Is it possible to setup Shared Services to use both Native and LDAP user directory? What I mean is some users will be able to login using Native directory, and some others will need to login using User Directory (external authentication).
2. For User Directory (say we use LDAP), when the user is added into Shared Services, can they be assigned with Groups created in Native directory? We want to explore to use just the external authentication and define all of the groups within shared services.
If not possible, can we manage the Groups of the User directory using shared services? How is the groups work with external authentication?
Any feedback would be much appreciated.
Thanks,
Lian

Hi,
Yes you can use both Native and external authentication. When you add the external provider the native is left by defaut anyway.
Yes you can add your external users to native groups. You can also provision the groups in the AD if you wish.
Gee

Shared Services security export utility CSSExport.bat Error

Hi,
When I tried to export security from shared services 9.3.1.
I got following error:
Trace...
2008-08-20 10:31:40,002 Attempting an export operation
1406 [main] INFO httpclient.HttpMethodDirector - Failure authenticating with BA
SIC 'WebLogic Server'@<ServerName>:58080
Unable to connect to the CMS subsystem... Authenticated has failed using
the supplied credentials
Aborting program...
I am able to connect to SS through IE and it is running.
Code is also working for me on another Shared Services 9.2.0 .
Please let me know if anyone else had same issue or any suggestion?

Edit export.properties file and look for importexport.username and importexport.password. The password is encrypted. If you know the password for the account being used you can remove the encryption and replace it with the clear text password. After the utility runs it will re-encrypt the password.
We use the Admin account in our properties file.

Shared service security set up

Is there anyway i can move all users and group from one application to another application in shared services.otherwise I have to re-create same users and group again for other application.
Can anybody help me with this
thank you

If you want to bulk provision you can use the CSSImportExport utility, it can be found with documentation in \hyperion\common\utilities\CSSImportExportUtility
Though if all members are part of a group then you would just deprovision the group for one app and then provision the group for a different app.
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services, Export Security on dimensions set in Planning

Similar Messages

Maybe you are looking for