Shared services vs essbase security

we upgraded from v7 to sys 9 recently..
when we used V7 essbase security was maintained by maxl scritps..?
creation of filters granting access and everything was using maxl..
How can i do the same now?
I think I cannot grant access to the cube or a filter using maxl anymore?? not sure
our cube refresh has a cube swap process which I think is done in many companies...
Can anyone explain the process to have security automated in sys 9

This is an empty cube that is only used to create the partition to a "back end cube" and support security. The concept of a facade (false front), in cube terms.
The outline would be a direct match, with security provisioned against it and the partition created as an "all to all" mapping in a "page flipping" approach to one of two alternating back end cubes.

Similar Messages

Clarification regarding Shared services and essbase security

Hi,
Sorry for the silly doubt. We have shared services to manage security, essbase v 9
1. to assign calc access for users, do i assign calc scripts under databases in group security and assign users to groups in shared services or do it via access control in shared services?
2. If in shared services i havent given calc access but in eas user belongs to a group with that particular calc script access, which would take precedence?
Regards,
N shah

In shared services, when i click on a particular application under the essbase server under the projects folder, there are cases where there are no users or groups under the 'available users and groups'. Why is this so? groups and users are supposed to be there.
Also, in a different application, i saw one available user. however when i try to provide calc access. its not changing anything. I select the calc script and then click the check mark. however nothing changes. The calc access for the user is specified as none. When i login to excel with the same user id, i can see all the calc scripts available for the user. Where are the details being picked up from.??
Edited by: 862089 on Jul 13, 2011 9:55 PM

Regarding Shared Services and Essbase Access

Hello,
I am curious on few things regarding how Essbase and Shared services are interlinked.
Basically we have created Essbase Filters to limit the User access to specific entities , my concern is if a User is trying to Run a report or retrieve through Smart View and if they don't have access to any one of the list of Filter definitions say if there are X , Y ,Z entities in the Spread sheet for Smart View retrieval or in a report and the user does not have privilege for Z do they still get terminated from the entire Essbase Applications. I encountered similar type of problem with one of the users today.
Any comments.
Thanks !

Thanks for the reply Glenn , yes it should not get disconnected or have any connection issue. But below is what the error we get when using Essbase security filter.
**** Cannot Open Member Selection. Essbase Error(1001064):You do not have sufficient access to perform read on this database ****

Error with Active Directory Synchnorisation from Shared Services to Essbase

Have recently installed HS9 v 9.3.1
In Shared Services i have created both native and MSAD users. Everything works fine with the native users (Planning,EAS etc...)
MSAD user directory has been configured & tested -ok on Workspace.
The MSAD users have been provisioned and can access Workspace & Shared services without any issue.
However, when accessing Planning, the following error is displayed in the Essbase server log:
Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Create External User With Type (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051205)
Single Sign On function call [css_getUser] failed
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
Error 1051205 processing request [Create External User With Type] - disconnecting
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Set Application FrontEnd Type (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Set Application Id For Planning (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Get Security Mode (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051001)
Received client request: Re-Sync User/Group with Single application (from user [hyperion])
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051590)
Synchronization started for user/group [MSADUser]
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Info(1051591)
Synchronization completed for user/group [MSADUser]
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Error(1051013)
User/group MSADUser does not exist
[Tue Mar 18 15:12:39 2008]Local/ESSBASE0///Warning(1051003)
Error 1051013 processing request [Re-Sync User/Group with Single application] - disconnecting
---------- When accessing through XL Addin, the foll is displayed:
[Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Error(1051012)
User MSADUser does not exist
[Tue Mar 18 16:49:09 2008]Local/ESSBASE0///Warning(1051003)
Error 1051012 processing request [Login] - disconnecting
Thanks !!!

Hardcode IP addresses instead of the server names in the essbase.cfg file and the Shared Services CSS.XML file for the Shared Services server references.
Restart SS/Essbase, provision an MSAD user, then do a Refresh from Shared Services in AAS.
Verify your MSAD userID then shows up as an Essbase user in AAS(Display User list for the Essbase server)
As long as the MSAD users show up in the user list, they should be working.

Shared Services and Essbase

Hello All,
Pretty much an undesired Bug, Basically there is an ID listed as an Essbase admin which yes it was few months back. At present that ID has been removed from Shared Services , also I checked in the list of Essbase Users within EAS and did not find the ID.
Interesting thing ***** When I exported the Essbase security file I could see that ID listed as an Admin , not sure how it comes up only in Security file but not any where else.
Is there any issue between Essbase and Shared services communication, because the Essbase should refresh Manually for any changes in the Shared Services.
Any comments Friends ?
Thanks !!

Its probably worth having a read of the following docs in Oracle Support as they should give an idea
Deleting a User/Group from Shared Services Does Not Delete it from the Essbase Security File [ID 1388447.1]
How to Delete a User from the 11.1.2.x Essbase.sec File [ID 1396890.1]
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services and Essbase Server Access Question

Hi,
It seems that we have to assign Essbase Server access at the individual username level and that groups don't work when it comes to Essbase Server Access. Is this correct or are we doing something wrong and groups do work with Essbase Server access? We are on 11.1.1.3 Essbase/Planning/Shared Services.
Thanks

You can provision Essbase Server Access via groups but it must be the very first thing provisioned and pushed to Essbase. Then after that, provision your groups with other accesses such as Planning, Reports etc....

Shared services and Essbase Sync issue

Hi,
Today morning all of sudden lot of users raised an issue that they can't see few applications while connecting through Smart view. I have checked Shared services and the groups are already provisoned. Finally I ran alter system resync sss and after the syncing its fine.
Any reasons why this morning Syncing was not there.
Thanks..

Its fascinating, if the users are provisioned too they can see other applications in smart view and that's what I heard but never checked on it, Is there any possible filters where they cant see it ?
If so please let me know.

Error from EAS - "refreshing security from Shared Services failed"

Hi,
I was using Native only security in HSS for Essbase 11.1.1.3 and EAS allowed me to Refresh security from Shared Services. (Essbase security was already externalized to HSS.)
However, after I added "MS Active Directory", and provisioned a MSAD user to a native Planning group, EAS errors out with "refreshing security from Shared Services failed" .
I checked Essbase security and that MSAD user is not added to Essbase.
From Essbase Log I see:
Essbase failed to get roles list for [ESB:Analytic Servers:servername:1] from Shared Services Server with Error [32:1062:Failed to connect to the user directory [ HSS'sMSADname].
I then tried to remove MSAD from our H Shared Services and see if this problem goes away. However, MSAD still shows on the left panel menu in H Shared Services. How can I get rid of MSAD?
Any suggestions?
Edited by: user643332 on May 12, 2010 12:05 AM

Hi,
Are you sure you have removed it from shared services, you may have just disabled it.
You must restart the shared services application server to apply any changes made.
Cheers
John
http://john-goodwin.blogspot.com/

Shared services security and essbase security

recently upgraded to sys 9 and now use shared services 931
we used to have security at essbase level previously and now its all Shared services..
now i have so many concerns
Can we automate the security just like I used to automate in essbase earlier...
or can we automate secuirty in essbase and them sync it to Shared services??
I know that we change security settings in SS and then sync it to essbase but is the other way around possible???
IF yes HOW?
IF NOT - can we automate SS security which reflects to essbase...
I have to go through the prod doc and I'll do that very soon but any suggestion on this would really help me out..
Thanks in advance

Hi,
can you please write more about which products and version are you using and on which operating system name and version.
Why do you use Shared Services? Are you using only Essbase server or any other server? If you use only Essbase server there is probably no need of using Shared Services.
If you need only Essbase you can see my info about installing Essbase without Shared Services: hyperion essbase installation
Please provide more info, so that we on forum can help you.
Regards,
Grofaty

Essbase - Shared Services security problem

In a Shared services enabled Essbase server,
For a user/group can we define different access levels (say Read on one & Write on the other) to different databases belonging to the same application (BSO)?
If not, Is there any alternative?
Appreciate your thoughts.
Thanks,
Ethan.

Of course you can.
If you're on v11, the steps are as follows:
1) Create a group (I am going to assume groups and usernames).
2) Provision the group Essbase server access and Read access to My Very Favorite Essbase Database In The Whole Wide World (MVFEDITWWW) -- Sample.Basic. You could get fancy and create a two level group hierachy with the upper level group provisioned ot Essbase server access and the second group Read access to Sample.Basic if you wanted to.
3) Expand the application groups and drill into Sample. Right click on Sample and pick Assign Access Control.
4) An Application tab will open up with a Database drop down. Select Basic and check off the box that relates to your group. It will have the role of Read.
You have just assigned access to Sample.Basic.
Follow the same steps for Sample.Intl, etc., etc.
Regards,
Cameron Lackpour
P.S. I believe the above holds true for 9.3.1 but the interface looks a little different. I never did it there -- all of my System 9 work was, alas, Planning only.

Shared Services access to Essbase cubes

I'm having several problems with user access to Essbase (non-Planning) cubes. The first problem is that I have granted Read access to the users (using a group) to these Essbase cubes in Shared Services. The security has been refreshed, and if you view the properties of any of the databases to which I've granted access, it shows that the group has read access. However, the users do not see these applications in Smart View Data Source Manager. Does anyone know why they are not showing up in Smart View? Using my own id, I added all of these applications to the pre-defined view, and if the users use the pre-defined view, they can see the databases, but if they try to connect it says they don't have access.
The second issue is that only the Essbase cubes that existed at the time that we upgraded to version 11 are showing up in Shared Services. We have since created several more cubes, but I am unable to get them to show up in Shared Services. What am I missing? Shared Services Help is not particularly helpful in either of these instances.
Thanks,
Sabrina
P.S. Just venting, but I hate Shared Services.

John,
I have two problems with your suggestion. The first is that when I go to the "Assign Access Control" page, I can't select users/groups, but can only select users. I could do each user separately, I suppose, but doesn't that sort of defeat the purpose of having groups? I'm on version 11 - do you know of any reason why I can't choose groups at this point?
My second problem is that I can't set them as essbase/planning users, if by that you mean there should be a choice that is both. I can do either one, but not both together. They are currently set to Planning. Will it mess anything up with their Planning access if I set them to Essbase?
Thanks,
Sabrina

Configuration of 2 Essbase Servers on one Shared Services Server

Hi,
Components Installed:
Essbase Server and Shared Services on 1st Server
Workspace, HFR and Web Analysis Installed on 2nd server. I have configured them and everything is working fine. No issues with this environment.
Requirement:
There is a Essbase server installed on Server 3. Its a Standalone. We want to make use of the Application created here and its security(groups etc) for creating reports through Workspace.
Question: Can I configure this Essabase server to the Shared Services which sits on Server1 (which already configured with Essbase already). If it is, are there any risks that we need to consider here.
Please advise me on this.
Thanks, UB

Thank you so much for your quick solution.
Please correct me If I am wrong here.
1) I need to run the configuration Utility on Server3 and give the same details used for Essbase in Server1. or
Is it ok if I run the Register with Shared services through Essbase Console on Server3 and point to the Shared Services server. I think by doing this, one more Essbase Node created in the Shared Services and the security on Essbase Server 3 can be utilized for generating Reports from Workspace.
Please advice John..
Regards, UB

Essbase issue on Shared Services OEPM11.1.1.2

Hi All,
I have one issue of Application Group created in Shared Services for Essbase...
If we delete the Application group for Essbase how can we get back it..Is there something stored as a backup after installation and
configuration...
I tried to reconfigure essbase with Shared Services and it is successfull...but there was a problem with Global Analytic Application not existing
with Shared Services during Essbase Startup...
Can you please help me in this regard?
Thanks,

Dear Experts,
This is something related to the Essbase Project created in Shared Services...I think the structure in OEPM11.1.1.2 is shown as
Application Group
----- Applications
----- Global Analytic Application (Problem is lying in this application during Essbase startup after reconfiguring with HSS)
Suppose if we delete the project how can we get back the Essbase Project if it is already in Shared Services Security Mode..
Can anyone help me on this?
Thanks,

Shared services security problem

Hi All,
My security is in Shred services mode
When i open Shared services
In the ApplicationGroup Folders
In the APS servers I remove my Essbase server now i want to add it again
please can any one tell me how can i add it
what should i do to get that
please help on this
thanks in Advance

I think, you need to configure the shared services and Essbase again. Try this and let us know if this helps to resolve your issue.
-UB

Refreshig security from shared services

let us assume that we are creating 5 users in shared services and provisioning them with different privileges. when refreshing these users security from shared services to essbase , i need to refresh the security of only one particular user role, how can i do that?

if using 9.3.1 later version u can use Shared servicves patch whcih will automatically update the security
or esle right clik on EAS security > refresh security from shared services > all users or currecnt users
which will update ur security
Refresh each user or group individually using MAXL command:
alter user username sync security with all application;
alter group groupname sync security with all application;

Shared services vs essbase security

Similar Messages

Maybe you are looking for