Shared Services Group Provisioning

Hi,
I am using Hyperion Shared Services 9.3.1. I am running a script to provision users under one group.
I am running it through importexport utility.
. I have tested the script with 2 users and it has provisioned those. that means script is correct. My problem is this time, I am running the script to provision 200+ users in one group
Is there a way I can check through logs how much its finished or how many users it has provisioned. I am going under that group in Shared services, over there its not showing those users.
Please help me.
Thanks in advance.
Pankaj Mehta.

Hi,
In the property file you can enable tracing by specifing trace log file in ExportImport properties file. enable the following properties:
importexport.enable.console.traces=true( Indicates whether trace information should be displayed in the console where the Import/Export utility is executed)
importexport.trace.events.file=<LogFileLocation>( TraceLogFile)
importexport.errors.log.file=<LogFileLocation>( errors during the operation is logged to this file)
Hope this helps!
Nra

Similar Messages

IOP 11.1.2.0 integration with Shared Services (User Provisioning)

In the IOP 11.1.2.0 install guide, the Admin and Admin provisioning roles are provisioned through Shared Services.
"Provision Integrated Operational Planning Administrator and Integrated Operational Planning
Provisioning Manager roles for the Integrated Operational Planning instance to the Admin user through
Oracle's Hyperion® Shared Services Console
a. Connect to the Oracle's Hyperion® Shared Services Console; for example, http://
hss_server:hssserver_port/interop.
b. Log in as the administrator.
c. Expand User Directories and Native Directory.
d. Select Users and click Search.
e. Right-click the Admin user and select Provision.
f. Expand Default Application Group.
g. Expand the Integrated Operational Planning instance created.
h. Highlight IOP Administrator and Provisioning Manager.
i. Click the right arrow in the middle of the two windows to select the roles.
j. Click Save, and then click OK."
The users and groups are defined in Shared Services, per the IOP 11.1.2.0 admin guide (p. 144).
Is there an IOP user provisioning example in the shared services user's guide, and which version of the guide would I find that in?
Access priveledges are controlled from the Admin workbench for IOP users, per p.145 of the IOP 11.1.2.00 user's guide.
Thank you.

IOP Roles are listed in the 11.1.2 Shared Services User and Role Security Guide, on page 158:
Integrated Operational Planning Roles
Table 39 Integrated Operational Planning Roles
Roles Tasks per Role
Provisioning Manager Provisions users and groups with Disclosure Management roles
IOP Administrator Administers Oracle Integrated Operational Planning, Fusion Edition. IOP Administrators can modify models, access
ACL pages, and perform all Integrated Operational Planning tasks
IOP User P erforms Oracle Integrated Operational Planning, Fusion Edition actions as a normal user

Shared Services drops provisioning on an ID??

Hi,
I have an issue on Shared Services 11.1.1.2.
About a month ago one of our users got married and subsequently had a name change in LDAP, but kept the same SAMAccountName ID - Ixxxxxxx
Issue: Every few days Shared Services removes elements of her provisioning. (for e.g. she is assigned to 7 groups in shared services, but this morning, she was only a member of 2 groups - she had been removed from 5 of them)
Our system is MSAD & LDAP configured.
Any suggestions?
Thanks
Dermott

Some times when ever any changes are done OPENLDAP it caches some information instead of writing in disk
To make cache writting disbaled go to windows registry
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\SCSI\"Device-Name"\"Resource"\Device Parameters\Disk]
"CacheIsPowerProtected"=dword:00000000
"UserWriteCacheSetting"=dword:00000000
this will force OpenLDAP to write its full status to disk more often
Moreover ,navigate to HYPERION_HOME\products\Foundation\OpenLDAP\slapd.conf
Find the CHECKPOINT at the end of the file. By default it's "256 10", which means "256Kb or 10 minutes (whichever comes first)". You can lower these parameters as long as performance is still acceptable. Usually report success with values as low as "64 3", which means that, on switching nodes, you will lose a maximum of 3 minutes of activity. Restart OpenLDAP for the change to be applied.

Shared Services Groups

Hi All,
How many groups we can create in Shared Services, is there any limit on number of groups in Shared Services?
We are using Hyperion system 9.3.1
Thanks & Regards

Hi,
I am not aware of a limit, the only sort of limit I have seen is down to active directory groups
"To ensure optimum performance, the number of groups present within the Group RDN should not exceed 10,000. If more groups are present, use a group filter to retrieve only the groups you want to provision."
Cheers
John
http://john-goodwin.blogspot.com/

CSSimport.bat error: while migrating the Shared Services groups and users

Hi,
I am trying to migrate the shared services native users and group from 9.3.1(on server A) to 11.1.1.3(on server B)
- I have taken the export in CSV format from 9.3.1 using CSSexport.bat.(export.csv) -Successful.
- I have copied this on the 11.1.1.3 server and changed lil details like removing the admin user etc.
- When I am trying the import this on 11.1.1.3, I am getting the below error:
CSSimport importexport.properties2010-10-11 09:36:41,328 Attempting a import operation
log4j:WARN No appenders could be found for logger (com.hyperion.css.common.CSSLogger).
log4j:WARN Please initialize the log4j system properly.
null
Aborting program...
- There are not log or error files geting generated - The only error recieved , is given above.
- I have made the necessary changes to the impotexport.properties file on 11.1.1.3 before starting the CSSimport utility.
Can you please let meknow what should I do to overcome this error.
-thanks,
Ankit

First thing I would try would be on the 11.1.1.3, try and run an export, if it works then run the import on the same file, this way you will make sure you have the version 11 utility working.
Once you have done that then you can move on to the 9.3.1 export file.
Cheers
John
http://john-goodwin.blogspot.com/

How to extract external directory users from a shared services group from shared services RDBMS repository

Hi,
I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
Thanks...

You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
select b.Name ,a.Name from HYPFOUND.CSS_GROUPS b ,
HYPFOUND.CSS_USERS a ,
HYPFOUND.CSS_GROUP_MEMBERS c
WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
c.GROUP_IDENTITY = b.IDENTITY_ID
GROUP BY (b.Name,a.name)

Shared Services deployed on WebLogic: Lifecycle Management Tool errors

Hi
In our pre-prod environment, Shared Services has been installed in Unix by "hypa" account belonging to "hyperion" group. Deployment on Weblogic has been done by "j2er" unix account belonging to "j2ee" group. j2er is also part of hyperion group.
I have given group level RW access to all directories and files under $HYPERION_HOME.
In Shared Services, user provisioning is wokring fine. When I am accessing LCM toolkit, and trying to run a migration, the msr directory initially did not get created. I had to give public RW access to "$HYPERION/common/import_export so that the PKGnn.xml could get created in the msr directory.
But when I execute the migration, the migration fail with error message:
"Task information defined for Souce connection is invalid"
Can any one suggest what to do? Is this related to file permissions?
In the Dev environment, the hypa and j2er are part of the same Unix group and everything works fine there.
Please suggest.

The error message is as follows:
java.lang.NullPointerException at com.hyperion.interop.lib.helper.ProductHelper.getProducts(Unknown Source) at com.hyperion.interop.lib.CMSClient.getProducts(Unknown Source) at com.hyperion.lcm.handler.RegistrationHandler.isProductCodeValid(Unknown Source) at com.hyperion.lcm.handler.PackageHandler.initialize(Unknown Source) at com.hyperion.lcm.clu.CLUProcessor.execute(Unknown Source) at com.hyperion.lcm.clu.CLUProcessor.main(Unknown Source).Unable to process task - 1. Task information defined for Source connection is invalid.

Refreshig security from shared services

let us assume that we are creating 5 users in shared services and provisioning them with different privileges. when refreshing these users security from shared services to essbase , i need to refresh the security of only one particular user role, how can i do that?

if using 9.3.1 later version u can use Shared servicves patch whcih will automatically update the security
or esle right clik on EAS security > refresh security from shared services > all users or currecnt users
which will update ur security
Refresh each user or group individually using MAXL command:
alter user username sync security with all application;
alter group groupname sync security with all application;

Assigning database access using Shared Services

I need to be able to assign security to a specfic database within an application. We have an application that has two databases. I provisioned the necessary group to the correct application to give them access. However, I only want that group to be able to see one of the two databases. How do assign security using Shared Services to provision access to just that database and not the other.
Thank you very much for your help.
Info:
Version of Shared Services - version 9.3.1

So I am going to answer my own post just incase anyone else is wondering the answer. I found the information right out of the hyp_security_guide.pdf - Security Administration guide. It states that - In Shared Services, if an Essbase application contains multiple databases, the databases must have the same user security access levels.
This is just my two cents, but I would think this might be something you would consider adding to Shared Services in future releases.

How to sync user for planning from Shared Services

Hi ..
Can anybody please let me know how to sync users for planning from shared services.
Thank you.

You need to expand on your question.
But the basic concept is you create or connect (for LDAP) users in Shared Services. You also create groups as required for these users. Then in shared services you provision those user to Planning applications (directly or indirectly through groups)
Then in Planning you will see users or groups. And in planning you connect them to either members in dimensions or to objects like Forms, Task lists, Business Rules.
There is therefore no such thing as synching Shared Services with Planning.
Note: the 2 steps mentioned above can be done in batch through load utilities.
Please expand you question if necessary

Neet to locate the shared services native users in SQL server tables

Hi All,
We are using Hyperion Shared services to provision users to essbase, planning and HFM(all version 9.3.1). And we are using SQL server 2000 as the database. We created few native users in shared services and provisioned them to HFM, Essbase and Planning. Now we need to find those native users' information in the underlying SQL tables. I followed the documentation and sync-ed the native to relational tables using shared services, but I cannot see the user info for all the users I have created. I would appreciate if you can suggest me how to find the shared services users' and roles information in SQL tables (in the back end).
Legards,
Leo

Hi,
There are a number of free Ldap browsers that you can download, e.g.
http://www.mcs.anl.gov/~gawor/ldap/demo.html
http://www.ldapbrowser.com/download.htm
Once you have installed then ldap browser you just need to point it to your Openldap
Host :- machine with OpenLdap running
Port :- 58089
Base :- dc=css,dc=hyperion,dc=com
User DN :- CN=root,dc=css,dc=hyperion,dc=com
And just the root password which you can change in HSS in 9.3
Cheers
John
http://john-goodwin.blogspot.com/

Essbase - Shared services security , User provison

Hi,
I am new to 11.1.1.2 Hyperion version.(worked on 9.3.1) I have some doubts on the user security in 11 version.
We have Distribution environment setup like Essbase on linux and remainng applications on windows 2003 server. Essbase is also registerd with shared services. Here are my questions.
1. If I change the Shared services Admin password (default password) will it effects any other applications?
*2. How to change essbase admin password (default password)?(from foreground we can change first time only)*
3. I am trying to login into EAS as well as essbase admin user but under essbase I am not able to create New User. The Create users option on security is disabled seems like already externalised. I am not able to get those users who are created in shared services evnthought using Refresh from Shared servcies+ option in essbase.
4. If I want to a user with only essbase applicatons provisioned what is the procedure.
Here i followed the procedure. Created xyz user in shared services and provisioned Only Demo applications. trying to loing EAS with xyz credentials login successfull and prompted for essbase credentials with server name , username (Extername authentication) getting failed. If i provide admin password at essbase server leverl i am able to connect and see all applications.
Please help me on this...
Regards
PrakashV

Hi,
Is it the base install of 9.3.1 or is it a later version like 9.3.1.3
I know there have been a number of security issues being addressed since the base version.
e.g.
Security. Users are not de-provisioned properly, causing Essbase applications to remain accessible to
them. [7197541]
Cheers
John
http://john-goodwin.blogspot.com/

Planner provisioning for user groups lost in Shared services

Hi All,
Everything was fine. All of a sudden, no users were able to login in to planning.
On investigation it was found that all the planner/planning provision to the groups is lost in the shared services.
Digged into log for a while and couldnt find out any issues.
What could be the reason we lost user group security provisioning only to planning?
Could anyone please help on this?
Regards,
GG

I used to have same experience every time migration happens from dev to UAT or prod etc.
After migration, registering with shared service will be successful. When i try to sync, migrate user identities (provisionusers.cmd) from shared service all user group info vanishes in planning (Add/Edit access page). i.e hsp_access_control table is truncated or all rows are dropped.
Then i have to set it up correctly. Guess this happens because usergroups have different id between different environments. When sync'g planning at target, it will not be able to recognize the wrong usergroup id of source system.
My assumption:
When provisionusers.cmd is run, planning fetches the usergroup provisioning information from shared services in to hsp_access_control planning repository table. could someone confirm the same?
Is there any other way to overcome this issue recurring on every time migration happens?
But the problem today was different: the provisioning is lost in the shared services itself which i havent witnessed so far. We didnt migrate recently, everything was file till 8 AM, but screwed around 8.10 AM. everything was up and running.
Cheers,
GG

Not able provision a new native group in shared services

Hi,
I am trying to add a new native group in shared services and trying to provision the group. But I am getting the following error:
90:7019:Failed to process the request
Is there any solution for it. Can anyone suggest me how to proceed further.
Thanks,
Hima

Can determine if the provisioning is failing for a particular application? Try to pick something confined to shared services like "application creator" in shared services and see if you can provision just that role. This will tell you if it is an issue with metadata from a product outside of shared services.
Do you have any applications with the same name or registered more than once in your application groups in shared services?
If it fails for everything you try have you restarted shared services and checked your jvm heap settings?
Also, in the logs Shared Services directory there are many log files , can you check them for any related error messages?
Thanks
Nick

Shared Services native group provision

hi can someone help me in this issue..
Shared Services.
Some Existing Native groups. Right click on group > Provision > gives error "This operation is not supported".
Have to deprovision to make this error go away. Right click properties OK, changes can be made, but cannot save, giving same error.
help needed urgently..
thanks..

ok thanks a lot john.
one more question for you John.
We need to know who logs in?
When they logged in and how long?
Also can we log what they access ie: reports, planning, analysis
How can we review these logs.
i know we can see the user sessions in view statistics page in planningg. but apart from that is there a way i can know wht all reports, applications etc a user accesses. i need to keep a track. is there some log for this?
thnks,
Ricky.

Shared Services Group Provisioning

Similar Messages

Maybe you are looking for