Requirements of SOX-how do to apply user password changes in Hyperion Planning

To the needs of SOX, we need configuration of end user accounts password policy. We configure users Hyperion as native users, our on-site Oracle consultants told us that the user password can not be changed and no strategy for renewal of password can be configured.

We understand that Oracle e-business as a result of such facility but Oracle implements yet this interesting feature to Hyperion products.

All Hyperion users have a workaround?

Thank you!

I guess that shares the group accounts would have implications of SOX as you cannot find a specific user activities.

Best practice would be to use the AD accounts with and assign the right level of access with the backup people in the same group as the main and both having the ability to play the role of user groups.

-John

Tags: Business Intelligence

Similar Questions

  • Satellite L50 - how to reset the user password?

    Hello

    How can I reset user password on a brand new L50 satellite laptop?
    I just got a password hint 'we now' If this is useful.

    I do not have a cod on USB because it asks me to

    What about the g2

    I assume you mean on the BIOS password. Right?
    Just to confirm that, please switch on the device and press the F2 key.

    If BIOS password has been configured you should NOT be able to access the BIOS...
    In this case, you will need contact the maintainer authorized Toshiba in your country in order to remove the password...

    Common laptop user is not able to remove unknown BIOS password.

  • NB305-106 - how to reset the user password

    Hello.

    My question is:

    How can I reset its password if I don't have the USB flash drive or a floppy disk required for this operation?

    My model is: Toshiba NB305-106. Thank you.

    Why you need a USB flash drive or USB floppy drive to reset the password?
    The password can be removed in the BIOS

    + What is a BIOS password? +
    http://APS2.toshiba-tro.de/KB0/FAQ9202JE0000R01.htm

    If you do not know the password, the Toshiba ASP can remove it.

  • How ATG BCC admin user password is encrypted in ATG10.2

    Hello

    I migrate data from external system profile to ATG. The external system uses the SHA256 algorithm to hash the user password. And ATG also uses the same algorithm. But I found that the string encodings are different in the two systems. So I customized the implementation for the hash of the password in the ATG. I guess that the same hashing algorithm of password to use in publication environments and CSC also for internal users. But the user "admin" is created when data is imported into the system, initially using script CIM. I think that the admin user password is not chopped with OOB implementation (SHA256) because I consider than salt password 'admin' in the table dpi_user in the edition of schema. Can someone let me know how the admin user password is encrypted?

    Thank you

    Mohan

    Hi David,

    My problem is solved. ATG uses the value of connection as its salt value password instead of generating a random salt for admin, merchandising, users of the services.

    Concerning

    Mohan

  • How to blur a user password in OID?

    the user passwords are hashed, but how to get this password? Are kind there?

    Version of the OID = 10.1.4.2.0 / 10.1.2.0.2

    Hashed passwords cannot be retrieved as the hash is a one-way mathematical function. You can't compare the hashes. If you have any IOM you can decipher the password or use the API does it for you.

  • Satellite Pro L10: How to remove the user password

    Hello

    I work for a school and we have a bunch of laptops Satellite Pro L10. I put a supervisor on all laptops password think this problem would be solved (I didn't enter a password each time the machines are enabled), but one of our students seems to have found its way to the HWSetup utility in Control Panel and could save a user password on one of the laptops.

    Alarmingly there seems to be no way to clear the password of the user, even though I have the supervisor password. I can get the BIOS as a supervisor, but the definition of a user password option is grayed out. Can anyone provide a solution for my problem?

    Thank you

    Hello

    Well, I think that this problem could be solved by updating the BIOS to the version 2.60 or greater.
    But the problem is that the password has already been fixed.

    I read in the paper of Toshiba that all passwords must be removed before starting the BIOS updates.
    That's why I think it would be advisable to contact Toshiba service partner to remove first the user password, and then update the BIOS.

    You know it's very risky to update the BIOS of the device when the user or any password has been set.
    It of possible that the BIOS update procedure will be interrupted if the password exists.

  • OIM 11 g R2PS2 - how to decipher the user password while calling the OIMClient API

    Hello

    I have a client application that connects to OIM 11 g R2PS2. Users connect in the client application to trigger a request for service and the client application will submit applications to the IOM.

    Connection to the end users to the client application using OAM authentication. So I need to find a mechanism to get the end-user password so that I can use the same in the OIMClient API to connect to IOM.

    If I login as XELSYSADM in the client application, is it possible that I can ask the user password and decrypt the same? I tried to use the code below, but I'm getting null pointer exception.

    RS = stmt.executeQuery ("select USR_PASSWORD from USR where upper (USR_LOGIN) ='" + id + "'");

    If (rs! = null & & RS.) Next {}

    String encPwd = rs.getString ("USR_PASSWORD");

    System.out.println ("get the DB password:" + encPwd);

    try {}

    String decryptPwd = String.valueOf (CryptoUtil.getDecryptedPassword (encPwd, null));

    tcCryptoUtil.decrypt (encPwd, "DBSecretKey");

    System.out.println ("decrypted password:" + decryptPwd);

    oimClient.login (id1, decryptPwd.toCharArray ());

    } catch (Exception e) {}

    e.printStackTrace ();

    e return;

    }

    }

    Exception:

    < 13 November 2015 12:29:01 EST > < error > < XELLERATE. ACCOUNTMANAGEMENT > < BEA-000000 > < class/method: tcDefaultDBEncryptionImpl/initKeyStore some problems: {1}

    java.lang.NullPointerException

    at com.thortech.xl.crypto.tcCryptoHelper.loadKeyStore(tcCryptoHelper.java:145)

    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)

    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:99)

    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.decrypt(tcDefaultDBEncryptionImpl.java:218)

    at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:122)

    at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:200)

    at oracle.iam.platform.utils.crypto.CryptoUtil.getDecryptedPassword(CryptoUtil.java:132)

    If you want to use the client of the IOM to send the request as long as the logged on user, IE of OAM session, then you might just get the context of the session of the user so the IOM customer queries will be made in this context. There is no need to decrypt the password for the user in this scenario.

    See rest of URL of excellent example illustrating this: Oracle Fusion Middleware security: authentication IOM API without the end user password

  • WebLogic admin user password change without disrupting existing users

    Hi people,

    As a business strategy, we need to change the password for the admin user in weblogic after a specific period of time.
    Please let us now how can we who without losing other existing users in "My Kingdom."

    I understand that we can use the weblogic.utils.security.AdminAcoount utility to give the new password, which will create a new file DefaultAuthenticatorInit.ldift in + < area-home > / security + record (according to Doc ID 1082299.1).
    The password will change, but the users in "My Kingdom" will be lost. (there are a lot of users and it is an environment of production also hobbies out of question)

    Is it possible that we can maintain users and still make the password change?

    See you soon,.
    Carole

    Once you DefaultAuthenticatorInit.ldift create a new file, any existing information will be lost.

    There is not another way, we can get the previous users.

    If you have the previous ldap/data directory, then we can have a chance.

    Otherwise, we don't have an option to recreate the user.

    We have an option to import/export security relams users, but this is before recreating the DefaultAuthenticatorInit.ldift

    Hope that answers your question.

  • Import of security through caused shared services admin user password chang

    Hello

    I exported the SSP url for shared environment and any services in another environment. This changed the admin password which I imported.


    Details:-

    I went to share the services of an environment say dev and to-> application-> Foundation-> shared and exported services groups. Has taken its export and imported into the test environment.

    Now that he has changed the user password of the target with the source one. However, I remove the internal ID of all the files inside.

    Can someone please help? How to recover the password of it? I have no back up of the test environment shared services.

    Version 11.1.2.1

    Thank you very much in advance!

    I was hoping you had a strategy in place, it's basically restore the relational database of shared services from a backup, stop the epm services first.
    It is even possible to fix your LCM file and set the admin to the way it should be, but I do not know what state the commissioning is to thus could not guarantee it would work.

    See you soon

    John
    http://John-Goodwin.blogspot.com/

  • How RMI is used to connect to a Hyperion planning?

    Hello

    We want to document how RMI connects to Hyperion planning under the hood for our security team. Can you please help us understand this process or point us to a document?

    Thank you

    Andy

    It is basically using the Protocol Java RMI that is running on a port by default 11333, if you do a search on the internet you can find more information on Java RMI, it is only really used now (11.1.2.3) by ODI to contact the planning

    See you soon

    John

    http://John-Goodwin.blogspot.com/

  • problem with user password change request

    Hi all

    I'm about to ask a question that I don't have much info. I'm not experienced with oracle forms or States but one my customer use them, my client decided to change the user password request forms and did. After that, developers are looking for config files and change the passwords in files of that too. is the application works fine but has reports of problems. as I said, there are two ways to run reports, web and run_product. When the URL is used, reports work well, but in forms (fmb) screens when the run_product procedure is used, they received the error "name of username/password invalid.

    even if they change the password user return application, there always the same error. should consider what could be the possible error and what are the files? I know, that it is forms 6i application.

    If your customer base is 11G, this could be a problem with the passwords case-sensitive. Try to set a password with only UPPERCASE letters.

  • User password change after the first connection of Oracle 11 g

    Hello

    Can you help somebody through this problem:

    the user cannot change the password after the first login Oracle 11 g


    All the best

    Ragip Avdijaj

    What is the error it gives when you try to change the passsword

  • Equium L40 - 17 M - how to reset the user password

    This is probably a really basic question, so I hope you can help!

    I forgot my password for my Equium L40 - 17 M.
    When I click on "reset password" under my user icon it says: "this feature requires removable media such as a floppy disk or USB flash drive" - that means? What should I do?

    Please keep you language simple I'm not technical!
    Thank you

    Hello

    I assume you are using the Vista operating system.
    In order to reset the password, you will need a password reset disk

    Here's a nice description of how to create a password reset disk:
    http://www.Vistax64.com/tutorials/101993-password-reset-disk.html

    and here you can find an instruction how to use this disk to reset the password:
    http://www.Vistax64.com/tutorials/102005-reset-user-account-password.html
    But note; the password reset disk can be created if you would be able to connect to Windows Vista.

    But if you would not be able to create the password reset disk, then you can try using the three method which is also described in the statement.

    Good luck

  • How to remove the user password in the Vista operating system

    Hello
    My son has a Toshiba laptop that he changed the password of today.
    Unfortunately, even if he had to type it in twice, he managed to kick it wrongly.
    So he now can't get into his laptop at all.

    Is there a way around to type the password?
    It has Windows Vista.

    At the moment he's still trying to find a way round, without success.

    Please can anyone help because really we do not want to use the product recovery disc since it will take hours to reinstall everything.

    Hello

    Maybe I can help you hmm I mean, not me, but the Microsoft Knowledge base article that I found on the site of MS:

    * [How to use system restore to log in Windows Vista when you lose access to an account | http://support.microsoft.com/kb/940765/en-us] *.

    I would appreciate any comments from you.

    Good bye

  • How to let the user to change the order of the lines inside a list box

    Hi all

    I need to display some values in a sort of list box and leave the user set their order by moving each row upward or downwards as he wishes.

    What is the best way to do it?

    Is there some sort of property node?

    Thanks in advance,

    Mentos.

    Use the list box.  In the Menu right click Watch "Drag And Drop".  I do remember not all settings on the top of my head, but you can allow dragging, dropping, disable the drag and drop out of control and make copy only.

    This should do what you want fewer knots of property.

Maybe you are looking for

  • Ads Started to appear - Hoqw to remove

    Yesterday ads began to appear on the home page that I've implemented in Firefox. Today, he says "Remove ads for $2.49 / mo. I uninstalled and reinstalled Firefox and reset default Firefox... no joy. Any thoughts?

  • I can't send mails before having to type the security codes that I can hardly read. How can I get rid of this feature?

    I've never had to enter a security code of base before emails... it's beyond frustrating; I find them really hard to decipher (they are the kind that look as if they are scribbled on) and had to register more than 10 a few times beofre I understand..

  • Update security for Windows (XP) maintains a failure.

    This has happened for months. KB976323 is the culprit. My Tech of lead may not understand how to get rid of this update. It drives me crazy and adds a lot of time in my day when I have to wait for the software to load and then fails. Thank you.

  • I can not view my complete Task Manager

    I can't view my complete Task Manager. My task manager only show process, that other manues are missing him, how to solve the problem of race?

  • Complete hard drive

    I have Windows 7 on PC HP Pavilion Elite m9040n. I ran pretty slow for several months. I was watching my C: hardrive and noticing get enough full. A lot of pictures on hard drive. To date, I tried to load some other photos from the camera on the C: d