Webi against OLAP Cubes and rowlevel security

Hi all
Running XI3.1, SP4. Windows
We are trying to create universes on top of OLAP cubes made in MSAS 2008, and take advantage of the rowlevel-structure that exist on the cube side.
When running a WEBI-report against the cubeuniverse, the current user logged in from InfoView should be passed to the MSAS cube. Different users will then get different results. This is our goal!!!
It works in Voyager, which runs directly at the cubes.
But is this possible, via WEBI and universes. Has anyone done this??
When creating the connection, the Authentication mode="Use SSO when refreshing the reports at runtime", looks promising.
But i get a error message, stating "DBD: Unknown error has occured when determining the ODBO connection credentials"
All inputs are appreciated
/Björn

Hi all
We have configured the BOservers with SSO, using AD-Kerberos (using Tim Ziembas whitepapers). So we are using authentication=WindowsAD.
It works perfectly for the end-users. They hit the INFOVIEW-url and they dont need no password.
The thing that we want to acheive, is to connect to MSAnalysisServer2008, with Designer. I want to create a universe on top of MSAS OLAP-cubes, and take advantage of the rowlevel-security that has been implemented in the CUBE-server.
When creating a connection in Designer using MSAS2008 OLEDB for OLAP Provider, there is the Authentication mode-dropdown. The second alternative "Use single-sign-on when refreshing..." gives the  error-message "DBD: Unknown error has occured when determining the ODBO connection credentials".
I dont know if this is a bug, or if when using middleware MSAS2008 OLEDB for OLAP Provider in combination with Authentication mode="Use single-sign-on when refreshing.." it isnt supposed to work. From the Designer documentation it should work.
We have tested this for Voyager, which connects directly to the cubes. It works in Voyager. the connection "feeds" the cubesystem with the user currently logged on to InfoView, and gives the correct rowlevel-restriction.
We want to acheive the same thing with Webintelligence.
Regards
Björn

Similar Messages

  • Unable to create dataset against OLAP Cube from different server

    Hi guys,
    If I load Microsoft SQL Report Builder on the BI Server, I am able to create a dataset against the OLAP Cube I created on the BI Server, however if I try to run the Report Builder from a different server I get the following error:
    "Unable to connect to data source 'MyOLAPCube'.
    A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 172.20.112.82:2382
    A connection cannot be made to redirector.  Ensure that 'SQL Browser' service is running."
    I have had no issues starting the SQL Browser service, however if I try to run it in console mode, I get the following error:
    'SQLBrowser: Warning: failed starting OLAP redirection services with error 1.'
    I have checked online and seen a few similar issues online however I haven't been able to resolve my issue with their resolution.
    Any help is appreciated.
    Many thanks
    Richard

    Yeah there is a firewall running on both servers, however I had opened port 2383 and was still unable to make a connection.  It is using a named instance on the server (servername/instancename) and it is configured to use port 0, so I therefore assume
    it should be using port 2383 by default?  Or as it's a named instance, is the default port 2382? Maybe it would be better to configure it to use a specific port and open the port on the firewall?
    Hi Rfla,
    As you can see on the link below
    http://technet.microsoft.com/en-us/library/ms174937(v=sql.110).aspx
    Named instances use dynamic port assignments. As the discovery service for Analysis Services, SQL Server Browser service listens on TCP port 2382 and redirects the connection request to the port currently used by Analysis Services.
    So you can open the port 2382 for Named Analysis Services Instance remote connect.
    Regards,
    Charlie Liao
    TechNet Community Support

  • Consuming an External Web Service using HTTPS and WS Security

    Hello everyone,
    I'm having a problem setting the security information in a SOAP header using a generated ABAP Client Proxy to consume an external web service that requires a User ID and Password in the Header section of the SOAP message.  I need to use HTTPS. I'm on a WAS 7.01 SP08 system so from my readings, SAP is supposed to be able to add the username and password into the header section of the message.  I can't seem to get SAP to add this information added to the header.
    Here are the steps that I have taken to set the security values.
    1) Created the client proxy from the WSDL in SE80.  Basic Authentication on the Configuration tab was turned on automatically.
           Note, Transport Security is set to None.  I cannot change it.
    2) Created an outbound set user name profile in transaction WSPROFILE with the appropriate username and password.
    3) Added the profile to the default port in transaction LPCONFIG as an outbound under the WS Security section of the screen.
    When I called the external Web Service, I got back the following error message:
    com.ibm.wsspi.wssecurity.SoapSecurityException: WSEC5509E: A security token whose type is [http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#UsernameToken] is required.
    So, after reading through this Forum, I saw that I needed to use the SOAMANAGER.  I set up a Proxy in the SOAMANAGER and manually created the Logical Port.  This was the only way I could figure out how to set the Authentication Settings in the Logical Port to "User ID / Password".  I then entered the User ID and Password.
    However, I am still getting the same error message.  I feel I am close but missing some small configuration to tell SAP to use WS Security with a Username token.
    I'm not sure what I'm doing wrong, so any help would be appreciated.
    Thanks,
    Stephen

    I had this error again so I thought I would post my solution:
    The issue is SAP needs to know the certificates being used by the web site being called.  These certificates are automatically installed in your browser but need to be manually installed in SAP.  This is what I did:
    How to find/install new certificates
    Make sure you run Internet Explorer as an Administrator so you can export the certificates
    Go to the web site that SAP is trying to call in Internet Explorer
    Double click on the lock in the address bar
    View certificates
    Find the certificates that are being used
    Tools --> Internet Options --> Content --> Certificates
    Click on the “Trusted Root Certification Authorities” tab
    Find the certificate identified in step iii
    Export as a CER certificate
    Click on the “Intermediate Certification Authorities” tab
    Find the certificate identified in step iii
    Export as a CER certificate
    Go to STRUST in SAP
    Import the Certificates in the “Anonymous” or “Standard” SSL client
    Save
    RESTART the ICM via t-code SMICM  <-- Critical!!!
    Test

  • ASO cubes and dimensional security, how???

    Hi,
    I'm getting my feet wet with ASO, and I'm wondering how to implement security on dimensions in a way similar to a Planning application (which is BSO only, I understand). When administering a planning application, I can apply security to specific members in dimensions, then refresh security etc, but what can I do for an ASO cube? I'm assuming that ASO cubes can be created/administered only through EAS.
    I need to be able to control what groups/users can access certain members of dimensions of ASO cube, when they run reports on the cube.
    Thanks
    Mike

    Hi Mike,
    User management and security is the same either for ASO or BSO application from Essbase point of view.
    You can either use Native security mode or security through shared services based on the configurations done.
    Check out this link from dbag for security,
    [http://download.oracle.com/docs/cd/E12825_01/epm.111/esb_dbag/pt06.htm]

  • Can I store only the aggregate data in OLAP cube

    Hi All,
    I know that the OLAP cubes store the leaf data and then builds the aggregate data on top of it and stores with in it. I have huge amounts of data ( like billions of data in my fact table and 6-8 dimension tables). If you keep the leaf data along with the agg data with in the cube would be too large to build.
    So I am thinking to have to store only the agg data within the OLAP cube and for the leaf data it should still read from the Relational tables. Something like Hybrid OLAP.
    (what I mean is
    1. create the dimensions and cube in the AWM on 11g.
    2. I will also specifiy the levels that I want the agg data to be calculated and stored in the OLAP cube.
    (what I want is
    1. I want to store only the agg data in the cube and leaf data still in the relatlional tables.
    2. when I read the cube and drill down to the leaf level , it should fetch the leaf level data.
    Is this possible in Oracle OLAP, if yes please provide some pointers
    Thanks
    S

    First you should try out storing and aggregating data to atleast see if the cube-loading time, query-time and AW-size is within acceptable limit or not. 11gOLAP especially 11gR2 OLAP is very efficient on all three fronts.
    Regarding specifying levels, you can either use Cost-based-aggregation and pick the %age that should be pre-aggregated OR you can use Level-based-aggregation and pick the levels from each dimension that should be pre-aggregated.
    Try these out before venturing into anything else. You will be surprised by the results. There are other ways to store the data in smaller multiple-cubes and joining those cubes through formulas. Make sure you don't mistake an attribute for a dimension.
    Not sure what you mean by just storing aggregated data in olap cubes. You can just do a SUM .. GROUP BY .. of relational data before loading it into olap cubes. For example, if you source data is at DAY level, you can SUM.. GROUP BY .. at MONTH-level and then load month-level data into olap cubes where leaf-level is month-level.
    The sql view (used by reporting tools) could then be a join between month-level "olap" data and "day-level" relational data. When you are drilling-down on the data, the sql view will pick up data from appropriate place.
    One more thing. Drill-Thru to detail data is a functionality of reporting tools also. If you are using OBIEE or Discoverer Plus OLAP, then you can design the reports in a way that after you reach the olap leaf-level, then it will take the user to a relational detail-report.
    These are all just quick suggestions (on a Friday evening). If possible, you should get Oracle OLAP Consulting Group help, who can come up with good design for all your reporting needs.

  • Can a OLAP Cube be Processed in to RAM , Can this be done using Traditional BI ? , If we can place the entire SSAS Cube in RAM for better performance , how can it be done?

    I'm trying to increase the performance of my OLAP Cube and i thought placing the CUbe entirely in RAM can solve this problem. can anyone please answer me , if this can be done using Traditional BI i.e SSAS and how?

    Hi Nagarjuna:
    I do not believe you can load the entire cube into RAM and even if you were able to do so, I don't think you'll be able to solve you performance issues.
    Here is a thread with the same discussion and it has some good links that you can visit to learn more about where the performance issues are emanating from  -
    How to cache all SSAS 2008 cube processed data into RAM
    Also, please tale a look at the followoing guide - Analysis Services Performance
    Guide
    Hope this helps.
    Faisal Muhammed My Blog

  • Drill-through from 1 OLAP Cube to another.

    Hi.Is it possible to drill-through from 1 OLAP Cube to another OLAP cube for AWM?Thanks!

    Where are you in the process ?
    If you don't have build the metadata for OLAP, do it first.
    Here a beautiful example :
    http://www.oracle.com/technology/obe/olap_biee/index.html
    Once you can query your OLAP cube, create all the join in the physical layer for your ROLAP source.
    Drag and drop the ROLAP fact measures on the measure of the OLAP cube
    and add the ROLAP column dimension table to your OLAP dimension table.
    At this point, you can then create the new ROLAP level in your dimension.
    Just add the new ROLAP dimension column in the presentation layer and you're done.
    The trick is that normally you don't have the same dimension column in your MOLAP and ROLAP environment.
    In this way, OBIEE will choose the good dimensional schema (ROLAP or MOLAP).
    Cheers
    Nico
    Edited by: gerardnico on Jul 29, 2009 3:25 PM Modify the trick with dimension column

  • Falied "Configure OLAP cubes for Project Web App" in Project Server 2013

    Hi
    I'm trying to use the PS2013's capability for generate SSAS Cubes; but after I execute
    the steps described on “Configure OLAP cubes for Project Web App (http://technet.microsoft.com/en-us/library/jj943761.asp)”  the only thing
    achieved is that the state being "Processing…" and the log:
    ===== Initiating OLAP database build process =====
    [10/11/2013 2:48 PM] Cube build request message has been added to the Project Server queue
    When I check the jobs, the one who is associated with the cube creation is on "Succeeded" state but the OLAP database is never created. There is no evidence I think on the Sharepoint log.
    For notice:
    10/11/2013 14:36:24.41 w3wp.exe (0x1A70)                       0x1848 
    Project Server                   Analysis Cube Building                       
    8ida        Information        Standard Information:PSI Entry Point:   Project User: PROJECTSERVER\system  Correlation Id: 0cea4e03-a432-e311-9401-001cc094718e  PWA Site
    URL: http://<server-name>/sites/Walkthroughs  SA Name: Project Server Service Application  PSError: NoError (0) Cube build request was placed on the Project Server Queue.  afaf4b9c-57d6-7004-2661-c95edeacab11
    10/11/2013 14:36:24.43 w3wp.exe (0x1A70)                       0x1848 
    Project Server                   Analysis Cube Building                       
    8swo     Medium               PWA:http://<server-name>/sites/Walkthroughs, ServiceApp:Project Server Service Application,
    User:PROJECTSERVER\system, PSI: [CBS] Status message: Cube build request message has been added to the Project Server queue,
    LogLevelManager Warning-ulsID:0x3873776F has no entities explicitly specified.                afaf4b9c-57d6-7004-2661-c95edeacab11

    Seems like an error occurred during site collection provisioning with the project server features. The provisioning process was interrupted from a system error and doesn't recovered after system restart.
    I just created and provisioned a new site collection and everything is working now.
    ===== Initiating OLAP database build process =====
    [10/16/2013 5:57 PM] Cube build request message has been added to the Project Server queue
    ===== Verifying and running pre-build server event handler =====
    [10/16/2013 5:57 PM] Verifying and running pre-build server event handler
    ===== Determining database and OLAP database structure =====
    [10/16/2013 5:57 PM] Cube build initialization started
    ===== Building database and cubes =====
    [10/16/2013 5:57 PM] Cube build session started
    ===== Verifying and running post-build server event handler =====
    [10/16/2013 5:58 PM] Verifying and running post-build server event handler
    ===== Processing OLAP database =====
    [10/16/2013 5:58 PM] Process OLAP database session started
    ===== Verifying and running post-process server event handler =====
    [10/16/2013 5:59 PM] Verifying and running post-process server event handler
    ===== Process Completed =====
    [10/16/2013 5:59 PM] Cube build request completed successfully.

  • Reg:Webi 3.1 reporting on OLAP cube

    Hallo.
    I've created 2  universe  in WebI 3.1 on BW OLAP cube  end on Bex Query .
    @funkctions,  aggregate Navigation  is  not availible nowhere . Mergin Demension is not  availible too .
    Is that normal in WebI 3.1 on BW OLAP cube  end on Bex Query ?
    Thank you .

    HI Vladimir,
    When you create universe on a Bex query or an OLAP cube you will have very limited options or features available in the universe designer.The @functions , aggregate navigation and merge dimensions features will not be available and you will be more dependent on the BW side as you are not free to use the functions and features which are otherwise available with oracle or sql backend.
    Regards,
    Neeraj

  • Reporting against an OLAP cube

    I have unsuccessfully tried to connect to an OLAP cube (SQL Server 2005) in Crystal Reports XI.
    I select OLAP from the Database Expert and Create a New Connection. I click Add to add the server. The server type selected is Microsoft OLE DB Provider for Analysis Services 9.0. The Server Options = OLAP Server. I type in the server name and instance and test connection and it says it is successful. When I add my user credentials (with and without the domain name) and hit Test Connection, I get the following error:
    "Failed to set properites (The following system error occurred: The requested operation requires delegation to be enabled on the machine. .)"
    Delegation was enabled on the server.
    I was reading in a CR book that I "may need to install client software specific to your particular OLAP system, such as a cube-viewing application, on your PC." I am not sure what that is. I have SQL Server 2005 client tools installed.
    Has anyone been successfull in reporting against a OLAP cube?
    Susan

    Please re-post if this is still an issue with your OLAP Connectivity please post to Business Objects  » Other Business Objects Products Forum or purchase a case and have a dedicated support engineer work with you directly

  • Error when querying SSAS 2000 OLAP cube with WebI (BOXIR2)

    Hi,
    I'd like to access a OLAP cube on Microsoft Analysis Server 2000 through Web Intelligence. The BO server is running BO XIR2 FP 5.7 on Windows Server 2003.
    I've installed the pivot table services on the BO server and am able to connect to the SSAS. I then created a connection, and on top of that connection an universe. The universe categories and objects where retrieved from the cube.
    When I now try to query the new universe, I get the following error message:
    BusinessObjects115.OLAPI.Cube.1] : Failed to set properties (Database 'ITZD_2010' does not exist.).
    ITZD_2010 is the name of the "folder" from which I selected the cube when creating the connection. The cube itself is called NFOTD and this name is also displayed as (not editable) database name in the connection details.
    Any help is greatly appreciated!
    Jochen

    In CCM i find 4 services:
    Apache
    Server Intelligence Agent
    WinHTTP
    World Wide Web Pubblish Service
    Is Server Intelligence Agent the service to change?
    i can't find WebI service....

  • Secure and non-secure access to the web application in one war

    Say we have one web application (in one war) which includes JSP, servlets and the security intercepter. There is one business requirement to have most of the JSP(s) accessed via HTTPS, but a few JSP(S) accessed via HTTP.
    My questions are:
    a. Is this possible, or a reasonable requirement or a good practice?
    b. if yes, what can we do to make it happen in the security intercepter implementation?
    c. If not, what is the technical reasons?
    Thanks much.

    a) Yes its is reasonable and good practive, there is an overhead using https, so you should only encrypt file you need to. When you use an online store, only account details / payments are https, the shop itself is http
    b) I dont really understand your difficulty. You can define a folder as 'secure' and put all your secure pages in this folder, leaving non secure files in a different folder. Whenever a page in the secure folder is accessed, https is automatically invoked.

  • Custom Fields and OLAP Cubes - PS2007

    Hi!
    I can include a custom field directly to olap cube per database? 
    I need have these fields (without lookup table) in olap cube "Portfolio_Analyzer"
    Tks.

    Hi Alex,
    In the OLAP section of the server settings, you can add custom field by types (projects, tasks, resources or assignments). Note that free text fields CANNOT be added to OLAP cubes (refer to the links I give you at the end of my reply). You just have to select
    the CF and to add it to the right part:
    Note that you have to differenciate measure and dimension:
    Cube Dimensions Specify the custom fields you want to add to the OLAP database as dimensions. The selected custom fields will be added to both timephased and non-timephased cubes, when applicable. 
    Cube Measures Specify the custom fields you want to add to the cube as measures. The selected custom fields will be added to the related Non-Timephased cube.
    Finally you can add MDX expression (new measures created with formulas based on existing fields) to any of the 14 cubes.
    Please find some useful links below (some are for PS2010, but still applicable):
    http://technet.microsoft.com/en-us/library/cc197614(v=office.12).aspx
    http://technet.microsoft.com/en-us/library/cc197728(v=office.12).aspx
    http://msdn.microsoft.com/en-us/library/office/ee767696(v=office.14).aspx
    http://blogs.msdn.com/b/brismith/archive/2010/09/01/project-server-2010-olap-where-are-my-custom-field-dimensions-and-measures.aspx
    http://office.microsoft.com/en-us/project-server-help/set-up-and-manage-olap-cubes-for-the-portfolio-analyzer-HA010074911.aspx#BM2
    Hope this helps.
    Guillaume Rouyre - MBA, MCP, MCTS

  • Web and Database Security - SQL Inject info

    Web and Database Security - SQL Injection.
    Here is a whitepaper on The Dangers of Dynamic Content (SQL Injection)
    http://www.issadvisor.com/viewtopic.php?t=125
    SQL Injection. 3 parts. The first part discusses the basics of how to test
    web applications for SQL injection vulnerabilities. The second part goes into
    the specifics of how to manually identify and test for SQL injection
    vulnerabilities. And the third part describes how to exploit SQL injection to
    retrieve data from the database.
    http://www.issadvisor.com/viewtopic.php?t=123
    Understanding this critical security issue, helps web developers that leverage
    database must design and make their applications more secure.
    Hopefully these two links are informative and useful. Please pass them on.

    An APEX page can certainly be configured to not require authentication (that's pretty standard for the login/ registration page). There is no need for an "Oracle public password." There are accounts in the Oracle database that APEX uses but that no human needs to know the password for. If that's what you mean by "Oracle public password" then, yes, you do. But that would be the case no matter what authentication and authorization scheme you use in APEX.
    A static IP address for your web server is likely a good idea. It's possible to have DNS work with dynamic IP addresses but that's probably not what you want.
    Justin

  • Crystal Report - Cube and OLAP concept

    Hi,
    could anyone please provide the good url for to learn Crystal Report - Cube and OLAP concept.

    Moved to OLAP forum

Maybe you are looking for