User report in shared service

Hi, I have many user and many group. I would like to check what group that each user in. (actually I can check in properties for each user but it's too many user)
Is there any report can show member of user group?
Thanks in advance

If you are on version 11, you can use Life Cycle Management to export security. This will include all the users and the groups that they belong to. Have a read of this: http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_lifecycle_management/lcm_security_migration.htm
Cheers,
Mehmet

Similar Messages

Generating user reports ( Hyperion Shared Services)

When i right click on Active directory->USer and say View Report, it by default generates report by USer ID, Is there any wasy to generate these reports by First and Last name of users?

Hi,
I have answered this question in post :- UsersByGroup SS report crashing;Shared Services Users not removed correctly
Cheers
John

While serching user provisioning in Shared Services it says................

While serching users provisioning in Shared Services it says...............
Operation cannot be completed.
We are able to search users in the directories but ...not able to see their provisions!

Are you trying to look at user provisioning Reports ?
Please elaborate

Reports in Shared Services 9.2.0.2

I would like to run a report from Shared Services 9.2.0.2 that shows all the users w/ access to our system and what level of access they have. We assign all of our users to groups and the groups are granted access. Our groups are created in the Native Directory and the users are in our NTLM directory. Is there a way to make this happen? I have not been successful in everything I've tried so far.
Thanks.
Terri T.

Ok just thought I'd check. That solution works fine for us but we use MSAD for external authentication. We use native groups for all our provisioning too.
Not sure why the report won't work with NTLM users.
Another solution, which is good because u get your data into excel, is to use the cssimportexport utility to export all the security. Then with some excel machinations you can relate the users to the groups to get the roles for each user. I have done that in the past to build a complete user list by application in excel. I had 50 groups with users and it took less than an hour to put it all together.
Maybe someone else can advise why the report isn't working for you..

Audit Reports in Shared Services

Hi guys,
Appreciate if someone could help me with the following query.
I have enabled Auditing for a Planning Application from Administration-> Reporting -> Auditing (tab)
However, when I try to 'View Audit Report' in Shared Services for the same application, it says 'Auditing is Disabled and No Records Audited'. Is there something I'm missing out on?
Dear John, it would be great if you could provide your valuable insight on this.
Thanks & Cheers,
Sahil

1.Using Shared Services Administrator credentials, log in to the Shared Services Console.
2.Select Administration, then Configure Auditing.
3.On the Audit Configuration screen:
a.Select Enable Auditing to activate auditing. If this option is not selected, Shared Services does not support auditing at any level. By default, auditing is disabled.
b.Select Allow Global Settings Override to disable application group and application-level auditing. If this option is selected, application group and application-level task selections are discarded in favor of the global selections.
c.Optional: To remove old audit data from the system, in Purge Data Older than, set the number of days for retaining the audit data and click Purge.
d.From Select Tasks, select the tasks for which audit data is to be preserved. Tasks are categorized based on the applications registered with Shared Services.
e.Click OK.
cheers...!!!

Automagic User Provisioning Essbase + Shared Services

Hello All,
I have recently been able to figure out how to use the Shared Services API for 11.1.2 in a previous post:
Shared Service API Working 11.1.2
However, all of the user management and provisioning examples work with native users. Has anyone used this API with active directory or LDAP users? Is there some other way (export/import utility)?
My problem is that I need to be able to script the user management with shared services and have not been able to find much help. In the past, we ran Essbase in standalone mode and were able to handle this via MaxL generating essbase native user accounts. This will no longer work since we want to use shared services when upgrading to Essbase 11.

After your comments I looked a bit more closely at the DDL for create user. It looks like i need "type external";
MAXL> create user 'someuser' type external;
OK/INFO - 1056060 - User [jdp5209] created.
This is what i want!
MAXL> create user 'someuser' identified by 'somepass';
OK/INFO - 1056060 - User [someuser] created.
This is not what i want, creates Shared Services native user.
It seems obvious now, but before, shared services (CSS module to essbase) was "external" so the old external is the new native.
Sorry, new to shared services! This works. Thanks all

NSAD user directory for shared services not working

Hi!
Im trying to configure a MSAD user directory for shared services in Essbase 11.1.2.1. I have done it correctly in Essbase 9.3.1.
Back then i had to import certificates to the cacerts java file. Is it still necesary? I dont see it mentioned anywhere in the v.11 docs, however, its not working using same parameters. I get an error saying i have specified "either host or port value incorrect".
Do i have to import certificates or am i missing anything else, can anybody help?
Thanks!!
Jorge

Certificates have nothing to do with MSAD.
when you reach to "MSAD user configuration" tab in Shared Services, try to see if you can auto configure user by inputting: sAMAccountNmae="some user ID", replace some user ID with your or admin ID, and verify if you can pull the users from the MSAD.

Audit Reports from Shared Services

I am using HFM 11.1.1.2 and want to pull a Audit Report in shared services. My approach are as follows:
In Shared Services on Application Groups, I select my application and right click and select Audit Report. I get the following error:
Auditing is Disabled and No Records Audited.
How and where do I enable this?
Thanks

You first have to enable Auditing globally in Shared Services. To do this, login to Shared Services, make sure you have the "Shared Services" node highlighted in the pane on the left-hand side and click Administration-->Configure Auditing.

UsersByGroup SS report crashing;Shared Services Users not removed correctly

Apparently, there are not many experts on Shared Services – nor is there much documentation.
We have an urgent need to get a Users By Group report successfully run from an Shared Services installation today (auditors!)! Opening a support ticket as well as making last ditch attempts to get more suggestions on how to resolve.
It appears as those the users causing the problem (the UsersByGroup Shared Services reports crashes) are NTLM. Apparently, several users were removed – before they were de-provisioned. Now they are not appearing on the default area but are appearing in other areas within SS. An attempt to re-add them failed to sync them back up (likely gave them each a new SID). We believe it is likely that the two issues are related (the not quite completely deleted users and the User By Group report bombing out – due to a user – since the provisioning is there, but the user is not, for these instances). Two of the Users show under Admin also, which should not be the case.
Any suggestions on next steps would be greatly appreciated.
Thanks!

Hi,
You should have a look at using the Update Native Directory Utility, this will clear out any stale users in your OpenLdap.
It should be situated in \Hyperion\common\utilities\SyncOpenLdapUtility
There is a zipped file called UpdateNativeDir.zip
It does have a read me on how to use it but it is pretty simple, on windows it is something like updateNativeDir.bat -cssLocation <location to your>CSS.xml
e.g updateNativeDir.bat -cssLocation C:\Hyperion\deployments\Tomcat5\SharedServices9\config\CSS.xml
You may need to update the bat file to include the correct location to your Java Home, you will get an error message anyway if it is not set correctly when you run the batch file.
It will create a log of all stale users removed.
Good luck.
John

Security Reports in Shared Services

Hi guys,
Could you please help me with a simple question (well, I believe it's easy, but I'm not able to answer it... :))
I'd like to give a user the permission to run security reports, but it's seems he has to be "Shared Services admin" to do so. Is that correct? Can I give him permission to run this kind of reports without giving him the role of "admin"?
I really appreciate your help.
Thank yo!
Regards,
Lu.

Only Shared Services Administrators can generate and view audit reports to track historical changes to the security data.
Refer: Page 86 of http://download.oracle.com/docs/cd/E17236_01/epm.1112/hss_admin.pdf
HTH-
Jasmine.

How to Create Bulk Users in Hpyerion Shared Services Console

Hi All,
I need to create bulk users in Shared Services Console. Since i have huge number of users so i don't want to use Front End. Instead i prefer to upload some CSV sort of stuff.
For this i export Shared Services console and open its Users.csv file.
Now my plan is to add all my users here and then will Import that Shared Services Console backup.
The only point where i am confused is that how should i specify Encrypted Passwords in Users.csv file and also what should i write in "internal_id" column

If you are using LCM and these are native users then you should be able to enter an uncrypted password and when it is imported it should be encrypted.
Leave the internal id column blank for new users, test by creating one new user.
Cheers
John
http://john-goodwin.blogspot.com/

Duplicate External Users in Hyperion Shared Services 11.1.2

Hi,
I was wondering if anyone had the same similar issue with Hyperion 11.1.2 Shared Services while configuring with MSAD. When i configure shared services with MSAD and create a group in Native Directory and add users to the group i see a duplicate user is getting created.
For Eg: Adding xxx user to group abc after save and right click on the native group and properties ans select users tab i see two users listed.
xxx ( which was added by me)
xxx$(which created by itself).
Opened up SR regarding this i havent found any luck wondering if anyone could help me out with this.
MSAD User configurations:
Login Attribute: sAMAccountname
First Name Attribute: givenName
Last Name Attribute:cn
Email Attribute:mail
Object Class: person
organizationalPerson
user

Hello,
Please confirm you only have one MSAD provider setup in Shared Services?
Regards,
John A. Booth
http://www.metavero.com

How to disable the User directory in Shared Services?

Hello,
We need to disable (Not Delete) the User Directory in Hyperion Shared Services. We are using the Hyperion version 9.3.1. Is there a way we can do this?
Thanks
S

From the 9.3.1 docs:
"If you do not want to use a configured user directory that was used for provisioning, remove it from the search order so that the user directory is not searched for users and groups. This action maintains the integrity of provisioning information. It also enables you to use the user directory at a later time, if needed."
http://docs.oracle.com/cd/E10530_01/doc/epm.931/html_cas_help/frameset.htm?removesearchord.htm
Cheers
John
http://john-goodwin.blogspot.com/

User Type in Shared Services

All,
I am on 9.3.1
Until now I have users only to planning app.
Now most of the above users need access to a native essbase app (with out planning).
In SharedServices, Under projects->AnalyticServer->AnalytciServer, only users are listed (no groups) and their "User Type" is planning.
Now I have to change them to "Planning, Essbase" for each user.
I didn't find "User Type" in corresponding section in the export of CSSImportExport utility.
have lots of users , Is there any way to automate?
Thanks
Krishna

Make sure the users/groups have the essbase role of server access
Then in shared services right click the essbase server and select "assign access control", select users/groups then you should be able to define the type of access essbase/planning.
Cheers
John
http://john-goodwin.blogspot.com/

How to extract external directory users from a shared services group from shared services RDBMS repository

Hi,
I have a security group in shared services, which has external directory users. I want to extract the list of users from shared services RDBMS repository using a SQL query. Please let me know if this is possible and from which table(s) I can query such list.
Thanks...

You need to use CSS_Groups, CSS_GROUP_MEMBERS and CSS_USERS tables in your Foundation DB. Something like below will give you these details:
select b.Name ,a.Name from HYPFOUND.CSS_GROUPS b ,
HYPFOUND.CSS_USERS a ,
HYPFOUND.CSS_GROUP_MEMBERS c
WHERE c.MEMBER_IDENTITY = a.IDENTITY_ID and
c.GROUP_IDENTITY = b.IDENTITY_ID
GROUP BY (b.Name,a.name)

User report in shared service

Similar Messages

Maybe you are looking for