Using Essbase security filter in OBIEE request ?

Hello,
We would like to use OBIEE 11.1.1.6 with Essbase source. We already use Essbase security filter (on dimensions).
For example, "userA" is allowed to access to Entity A and not Entity B and the opposite for "userB".
If I loggin as "userA" in OBIEE, is it possible for OBIEE to connect to Essbase with "userA" so that Essbase return data only on Entity A and not Entity B ?
Thanks!

Hi,
The way let OBIEE users, have Essbase security filters running for them, is by integrating OBIEE and EPM using Single Sign On. When, both OBIEE and EPM talk to the same Identity Store like OID/MSAD, you can set this up. For more integration steps, refer to http://www.google.com.sg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&ved=0CDAQFjAA&url=http%3A%2F%2Fwww.oracle.com%2Ftechnetwork%2Fmiddleware%2Fbi-foundation%2Fhfm-sso-obiee-1112x-1835570.pdf&ei=O7ElUeCTApGzrAeelIHwCw&usg=AFQjCNE1BzMQU6Cwny-0IwcvxkfxeqlONg&bvm=bv.42661473,d.bmk
Hope this helps.
Thank you,
Dhar

Similar Messages

Essbase Security filter in OBIEE 11.1.1.6 request

Hello Experts
I have got a requirement whereby I need to apply Data Level Securityfor the Essbase sourced cube in OBIEE11g. But the issue is the dimension value where I need to apply security filter has 25K distinct values and is Unbalanced Hierarchy where the leaf members is distributed across differnet level . Actually it is ragged heirarchy in Cube which when imported in OBIEE becomes a Level Based Heirarchy where the leafs becomes shared across differnet level. Now the general OBIEE rule says - Create separate application groups for each lowest level dimension vales and apply security filters for each values respectively for each group and assign users in those groups.
But the issue is :
1. Here there are 25 K members in the dimesional value where I need to apply Data Level Security . So it is not possible to create 25K distinct group.
2. The dimension which needs to be used for Data level security has Ragged Hierarchy where the lowest leaf (which would eb used in security filter) is shared across differnet levels.So there is no single column that I can select in RPD to apply security filter.
Pls. suggest a solution.
Is there a way that I can source the Essbase Filters to work as Data Level security in OBIEE 11.1.1.6

You can upgrade to 11.1.1.7 and use Weblogic to assign security, then EAS to apply filters, and then OBIEE Enterprise Mgr to apply the application roles (i.e. via Essbase Filters). The gotcha is that you need to install OBIEE 11.1.1.7 and include the Essbase component as part of the install.
If you need more info let me know.
Daniel Poon

What is use of protect filter in OBIEE

Hi guys,
Could you please let me know what is use of Protect filter in OBIEE ?
Regards,
sk

"Protect filter" basically "hard-codes" a filter so that it won't be overwritten.
Say you want to always filter a column for "X," but also want to include a value from a dashboard prompt. So you write the following:
table.column = 'X'
or
table.column "Is prompted"
The user chooses the value "Y" from the prompt and the filters now look like this:
table.column = 'Y'
or
table.column = 'Y'
Gone is the "X" value because it was overwritten by the prompt. If you protect the top filter, you will get:
table.column = 'X'
or
table.column = 'Y'

Essbase Security Filter issue.

Hi,
Its regarding the security filter issue.
The major problem is whosoever user is provisioned under that security filter, if the user is trying to connect to Application using Excel Addin / Smartview, it crashes the essbase server [Network Error [10061], timed out error)]
When we figured out because of this filter essbase server is crashing, we tried to edit the filter. sometimes if we click on edit, it crashes the server or sometimes we can see some junk characters in the filter.
We have applied the security on Entities dimension and problematic filter is ASP.
Now the hirerachy is like this.
Entities dimesnsion and then ASP member and under ASP we have our several members.
Filter is like this:
Write : @Idescendants("ASP")
It was working fine for almost 15 days.
Now if i edit the filter, i can see like this:
Write : @Idescendants("ASP")
Metaread:@Idescendants("*&^%?)
Junk characters are coming in and no idea from where they are coming.
I can't delete the filter also, again it crashes the essbase server.
As a workaround i have created a temp filter and dome the assignation for this group, according to that.
Everything is working fine.
I just wanted to know, has anybody faced such kind of problem earlier.
What cud be the root cause for this.
How could I delete the filter.
I have also get messages like security file is corrupted (we have restored it from old backup) but really worried about security file as we are moving the whole thing to production server this weekend.
Please advise me on this, Please help me. Any help would be highly appreciated.
I am really in trouble.
Thanks,
Pankaj Mehta.

Try to edit the filter from MaxL command line using
alter filter sample.basic.filt7 add write on '@IDescendants("ASP")';
here sample=application
basic=database
filt7=filtername
have good luck

Using Essbase as source for OBIEE 10.1.3.3

Our company is in the process of implementing OBIEE 10.1.3.3 and I was trying to import an Essbase database (7.1.6) as a source for the Physical layer. However it looks like there was a change from 10.1.3.2 to the version we have. The docs show you can select File/Import/XMLA, however in the newer version instead of XMLA you have "From Multi Dimensional...". When I select this option and fill in the Essbase Server name,ID & pswd it crashes the OBIEE Administrator client.
The error I get before it wants to "Send the Report" mentions this:
AppName: admintool.exe AppVer: 10.1.3.3 ModName: essapinu.dll
ModVer: 7.1.6.6218 Offset: 00008282
I then tried another way by right clicking on the Physical layer and choose "New Database". In there you have a option for the database of "Essbase". However, even when I fill in the server and ID & pswd I can't find anything in the docs showing you how to have it list the Essbase applications and Databases. According to the Oracle Support the docs for 10.1.3.2 are the latest docs which don't mention anything about connecting to Essbase that I can see.
Has anyone tried to use Essbase as the database source for OBIEE 10.1.3.3 and been successful? Any info would be helpful!!
Thanks!

It is my understanding you need at least 10.1.3.3.2 (upgrade/patch).
I'm currently on 10.1.3.3.0 and will be using ESSBASE shortly - so we actually have purchased 10.1.3.3.3 (OBIEE Plus).

Essbase security filter access issue

Hi,
we are facing access issue for users. we have provided the access as filter, its essbase only application. we dont see in display user table APP Access Type column essbase&Planning, only planning its showing..its 9.3.1 version. even sync native dir & essbase refresh done couple of times..but still issue persists.
please help.
:-):-)

Hi John,
I have done same thing, but its just showing filters only.
In Projects->select server/app->selected user/grp->
right click the essbase icon and select "assign access control" > select your user/grp, here i can see only filters which already there and calc (none,no update, all& calcs).
I have selected one filter and none(calc option)->click on tick mark->save......but here i am getting message as "no changes to save" then done EAS refresh ....
still users are not able to login.getting error
"user <> not permitted to access application"
Note: other users have same access can able to login & we are able to see those users in users table as "essbase&Planning", but for problem users its still showing that only 'planning'
please help
thanks

Developer's need to know things: Essbase as datasource for OBIEE

I am in a project where Essbase is the datasource. I know nothing about Essbase but I an experienced OBIEE prof. Can anyone tell me the things I need to know about integrating Essbase with OBIEE, using Essbase cubes in obiee. I looking for some basic fundamentals of Essbase so I could successfully use Essbase cubes with OBIEE.
I find lot of materials online but not sure what I need to know for using Essbase as datasource for OBIEE. Any insight / links would be of lot of help. Thanks a million

Glenn, Thanks for your reply. Yes I follow his blog and venkat's blog about Essbase and OBIEE. I am looking for a comprehensive information on what I need to know to work with Essbase Cubes in OBIEE. Please let me know if there is anyother resource you can point me to.

Issue in Implementing OR Logic in Security Filter for Essbase in OBIEE

I am implementing OBIEE using Essbase as the data source. The requirement is to implement OR logic in the security filter. And I got error message from the MDX query generated by OBIEE. Below is the details. Anyone knows how to solve this issue? Thank you very much.
1.     The “Booking Location” dimension has three hierarchies (ragged hierarchies).
http://img.photobucket.com/albums/v216/stewart_life/1.png
2.     I only want to take the first hierarchy, which is “Total booking”. Thus, I filter the Logical Table Source of “Booking Location” in the business model layer.
http://img.photobucket.com/albums/v216/stewart_life/2.png
3.     The “Incorporation Country” dimension doesn’t have any multiple hierarchies.
http://img.photobucket.com/albums/v216/stewart_life/3.png
4.     Thus, I don’t filter the Logical Table Source of “Incorporation Country” in the business model layer.
http://img.photobucket.com/albums/v216/stewart_life/4.png
5.     I filter the permission of a user. This filter applied to the fact table (RISK) in the business model layer.
http://img.photobucket.com/albums/v216/stewart_life/5.png
6.     Then the filter applied so that the particular user can only see the data where the Incorporation Country level is Singapore OR the Booking Country level is Singapore:
"Risk"."Incorporation Country"."Country" = 'SINGAPORE (INC)' OR "Risk"."Booking Location"."Booking Country" = 'SINGAPORE (CBE)'
http://img.photobucket.com/albums/v216/stewart_life/6.png
7.     Here is the first report that is working fine if run by a user without any security filter.
http://img.photobucket.com/albums/v216/stewart_life/7.png
8.     The result of that report when run by the user whose security filter above has been applied to.
http://img.photobucket.com/albums/v216/stewart_life/8.png
9.     The MDX query generated from that report is shown below. Note that the error refers to the line 4, which is in bold below. Somehow, the query generated always include Incorporation Country and Booking Location in the “With” clause, since both of them are placed in the security filter.-----
Sending query to database named Risk-MI Essbase (id: <<399750>>):
With
set [Booking Location2|http://forums.oracle.com/forums/] as '{[Booking Location|http://forums.oracle.com/forums/].[Total booking|http://forums.oracle.com/forums/]}'
set [Booking Location4|http://forums.oracle.com/forums/] as 'Generate({[Booking Location2|http://forums.oracle.com/forums/]}, Descendants([Booking Location|http://forums.oracle.com/forums/].currentmember, [Booking Location|http://forums.oracle.com/forums/].Generations(4),SELF), ALL)'
*set [Incorporation Country4|http://forums.oracle.com/forums/] as ''*
set [Time3|http://forums.oracle.com/forums/] as 'Time.Generations(3).members'
set [Year2|http://forums.oracle.com/forums/] as 'Year.Generations(2).members'
member Measures.[MS1|http://forums.oracle.com/forums/] as 'Rank(Time.Generations(3).Dimension.CurrentMember, Time.Generations(3).Members)'
set [Axis1Set|http://forums.oracle.com/forums/] as 'crossjoin ({[Booking Location4|http://forums.oracle.com/forums/]},crossjoin ({[Incorporation Country4|http://forums.oracle.com/forums/]},crossjoin ({[Time3|http://forums.oracle.com/forums/]},{[Year2|http://forums.oracle.com/forums/]})))'
select
{Measures.[Netted EAD|http://forums.oracle.com/forums/],Measures.[Netted Nominal|http://forums.oracle.com/forums/],Measures.[Wt_LGD|http://forums.oracle.com/forums/],
MS1} on columns,
NON EMPTY filter({[Axis1Set|http://forums.oracle.com/forums/]}, [Incorporation Country|http://forums.oracle.com/forums/].currentmember IS [Incorporation Country|http://forums.oracle.com/forums/].[SINGAPORE (INC)|http://forums.oracle.com/forums/] OR [Booking Location|http://forums.oracle.com/forums/].currentmember IS [Booking Location|http://forums.oracle.com/forums/].[SINGAPORE (CBE)|http://forums.oracle.com/forums/]) properties ANCESTOR_NAMES, GEN_NUMBER on rows
from [http://RISK-P.RISK]
where ([CRG (ORG)|http://forums.oracle.com/forums/].[Good Book (ORG)|http://forums.oracle.com/forums/], Method.ADV)
+++stewart:370000:370021:----2009/02/17 13:56:06
Query Status: Query Failed: Essbase Error: Syntax error in input MDX query on line 4 at token '''

From what I have read on this forum, people have managed to get the DC In Board replaced for a little over US $100. This would be at an Apple authorized repair shop rather than by Apple itself. This is much less than the cost of a new MacBook. I don't know what might be available in your area, but it would be worth asking at a repair shop.
Good luck!

[OBIEE 11g] Enforce star-schema without security filter?

I have imported my first OLAP cube using the instructions <a href = 'http://www.oracle.com/webfolder/technetwork/tutorials/obe/db/11g/r1/olap/biee/createbieemetadata.htm'>here</a> and have applied the necessary security filter to force the star join between the cube and dimension views. However, the security filter does not apply to users in the BI Administrator user group. Is there any way to do this without a security filter, or somehow apply the security filter even when the user is an administrator?
Edited by: islan on Jan 22, 2013 7:56 AM
Edited by: islan on Jan 22, 2013 7:57 AM

The link in your first posting points to the old-way of creating OBIEE metadata for OLAP objects.
Starting with OBIEE 11.1.1.5, it is much simpler as Oracle-OLAP is one of the data sources in BI-Admin Tool.
So do not use the old way.
Start with this doc:
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/bi/bi11115/olap/olap.htm
For your other issue, you need this troubleshooting doc:
http://www.oracle.com/technetwork/database/options/olap/troubleshootingbieeconnections-504856.pdf
Note that even though it says OBIEE 11.1.1.5, the above two docs are applicable to 11.1.1.6 and future releases.
For security, you should define it in OBIEE instead of doing in OLAP.
.

OBIEE and Essbase security pass through

Hi All,
I'm using Essbase as a data source for OBIEE. Right now I'm trying to use Hyperion security to pass through OBIEE. I've setup OBIEE to use Hyperion Shared Services as custom authenticator and Hyperion users can log in. However, I'm having problem passing through the users to Essbase. I've changed the Essbase connection pool to use :USER and :PASSWORD. When I tried to check for global consistency, I'm getting the following error
[38098] The password in the Connection Pool '"server"."Connection Pool"', associated with the Repository Initialization Block '"SUB_VAR_BLOCK_server"', contains the use of :USER or :PASSWORD.
When I tried to open any existing Essbase reports from OBIEE, I'm getting this error (as expected)
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. Essbase Error: Login fails due to invalid login credentials (HY000)
Any ideas on how to get around this issue? Thanks
Regards,
Gerd

Hi Gerd,
Could you please explain in detail how you have setup OBIEE to use Hyperion Shared Services as custom authenticator so that Hyperion users can log into OBIEE?
Please provide the steps and custom authenticator function?
we would need to implement it fromm scratch. So, your help will be greatful.

Security filter validation crashing essbase

During security filter validation, Essbase froze and stopped responding. We had to re-start essbase service.We are on 6.2.3 and NT server. Any insights or similar problems with validating filters?Thanks

We see same issue in 9.2.0.3, but only with 1 of our 5 applications. Was never able to get support to identify a cause, our resolution is to push users in small groups and save the essbase.sec file. Real pain. You could try stopping essbase service, using essbase.bak file and restarting then try to push and see if it works. I did identify issues with our openLDAP which I felt was the cause, I was able to clean it up in TEST and it works, but did same in Prod and worked once, then reverted back to crashing again, unless we push users in really small groups. Interested to see if you get a 'fix' from someone...

Planning Security Filter refresh and Essbase is Crashing

Hi,
I am on System 9.3.1 and I am doing a Planning security filter refresh and Essbase is Crashing. Please advise in this case.
Security is fine on this cube. It used to work fine earlier. Now from few days we are facing this issue.

We see same issue in 9.2.0.3, but only with 1 of our 5 applications. Was never able to get support to identify a cause, our resolution is to push users in small groups and save the essbase.sec file. Real pain. You could try stopping essbase service, using essbase.bak file and restarting then try to push and see if it works. I did identify issues with our openLDAP which I felt was the cause, I was able to clean it up in TEST and it works, but did same in Prod and worked once, then reverted back to crashing again, unless we push users in really small groups. Interested to see if you get a 'fix' from someone...

Filter on the reports created using DIRECT DATABASE ACCESS in obiee 10g

How do i filter on the report that is created by using DIRECT DATABASE ACCESS in obiee 10g?
I have reprot A with link to report B, report B is created using DIRECT DATABASE ACCESS. so it is just a table, but i need to filter out 2 columns.
here is the query in REPORT B:
select strm, acad_group, crse_id, class_section, count(emplid) from v_crse_enrl
group by crse_id, strm, class_section, acad_group;
the link in REPORT A:
'<a target="_blank" href="'||VALUEOF("bi_link")||'Go&Path=CF_CROSS_TEACHING_LIST&ACTION=Navigate&col1=STRM&val1='||view1_DIMEN.STRM||'&col2=CLASS_SECTION&val2='||TRIM(view1_DIMEN.CLASS_SECTION)||'">' ||view1_dimen.class_id||'</a>'
from this link to report B.
thank you!!

I didnt tested using url, but the same works with using presentation variables.
To your direct sql add where clause for those two columns like WHERE col='@{col1}' and col ='@{col2}'
and try to run from url.
let me know updates

Security filter couldn't refresh to Essbase from Planning but could create

Please kind help on look at this issue.
I updated some dimension access in Planning,and did a security refresh in management database menu.But the access didn't refresh to Essbase filter.
Then created filter in management security filter menu,it refreshed to Essbase successfully.
I would grateful if someone could tell me why the first way unsuccessful.
Thanks,

If you go to Oracle Support and search on "planning security refresh" you will see lots of articles on this subject.
Cheers
John
http://john-goodwin.blogspot.com/

Issue with write Security filter in ASO 9.3.1

Hello All -
I'm having a strange security filter issue in system 9.3.1 ASO cube. We've the native users for the ASO cube and created several write security filters based on cost centers in that cube.
For example, the below security filter sometime works, and sometime not:
Write "Adjustments", @RELATIVE ("S532179", 0), @RELATIVE ("S587724", 0), @RELATIVE ("S525701", 0)
There are total 8 standard dimensions in the cube. I tried all possible combinations to make it work constantly, but it doesn't. Even modified the filter like below so that it has all dimensions (using LEVMBBRS, IDESCENDANTS, RELATIVE) , still users can't load data at level 0 members.
Write @LEVMBRS ("Chart of Accounts",0),@LEVMBRS ("Full Year",0),@LEVMBRS ("Business Unit",0),@LEVMBRS ("Fixed/Variable",0),@LEVMBRS ("Source",0),@LEVMBRS ("Products",0),@LEVMBRS ("Scenario",0),@LEVMBRS ("Cost Center",0)
It looks like the user and filter association is not working. If I give the user direct write access to the cube (bypassing filter totally), the users can write fine. Please help!

I didn't know that the logs didn't work; I tested it and they are not generated for ASO updates in 9.3.1. I didn't see any other setting that would cause them to be created; my guess is that the logs are created based on block manipulations that Essbase does internally using BSO. As there are no blocks in ASO then the same algorithm doesn't apply.
We log Essbase changes in our Dodeca product but we use a different algorithm. We evaluate the update in our server before committing the changes and generate a relational log that has the datapoint information plus the old value, new value and standard 'who' information for the person making the update.
Tim Tow
Applied OLAP, Inc

Using Essbase security filter in OBIEE request ?

Similar Messages

Maybe you are looking for