Shared Service user provisioning end table back details

Similar Questions

• NSAD shared services user directory does not

  Hello!
  
  Im trying to set up a directory of user MSAD SSP in Essbase 11.1.2.1. I did it properly in Essbase 9.3.1.
  At the time, I had to import the certificates in the java cacerts file. Is it always necessary? I don't see that it mentioned anywhere in the docs v.11, however, its does not work using the same settings. I get an error saying that I've specified 'host or port value that is invalid '.
  Do I have to import certificates or am I missing something else, can someone help?
  
  Thank you!!
  Jorge

  Have a read of http://docs.oracle.com/cd/E17236_01/epm.1112/epm_security_1112200/ch02s08s03s08.html

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• IOP 11.1.2.0 integration with Shared Services (commissioning of user)

  The Pio 11.1.2.0 install guide, Admin and Admin provisioning roles are implemented through shared Services.
  
  "Integrated provision Director of operational planning and integrated operational planning."
  Provision of role manager for operational planning integrated with the Admin user instance via
  Oracle Hyperion® Shared Services Console
  a. connect to the Services Console shared Oracle Hyperion®; for example, http://
  hss_server:hssserver_port / interop.
  b. log in as an administrator.
  c. expand the directories Directory users and native.
  d. Select users, and then click search.
  e. right click on the Admin user, then select the layout.
  f. developing group of Application by default.
  g. expand the integrated operational schedule created instance.
  h. highlight the IOP Admin and configuration manager.
  i. click on the arrow to the right in the middle of two windows to select roles.
  j. click on save and then click OK. »
  
  Users and groups are defined in Shared Services, by 11.1.2.0 IOP admin guide (p. 144).
  Y at - it a user IOP commissioning for example in the shared services user guide, and which version of the guide I would find it in?
  Access privileges are controlled by the Admin workbench for users of the IOP, by p. 145 of IOP 11.1.2.00 user guide.
  
  Thank you.

  IOP roles listed in the Shared Services user and role Security Guide, page 158 11.1.2:
  Integrated planning of operational roles
  Table 39 integrated operational planning roles

  Roles of jobs by role
  Provisioning Manager provisions users and groups with roles of disclosure management
  IOP Administrator administers Oracle integrated operational planning, edition of Fusion. IOP administrators can modify the templates, access
  Pages of the ACL and perform all tasks of operational planning integrated
  Erforms IOP user P integrated operational planning of Oracle Fusion as a normal user editing actions

• Application analytical Server lack of project in Shared Services

  Slowly rebuild my trashed development server. However I can not access the Essbase server via EAS without getting a network error 10061
  
  I noticed in my list of projects that I don't have the server for the Project Server analytical value.
  
  I save again with the SSP on analytical Services? If Yes, I tried that to no avail...
  
  You are looking for ideas.
  
  JTS

  Hello

  You may need to convert essbase natively so try and convert again in shared services mode.
  This means back to your file essbase.sec back to before it was converted in hss mode.
  Doing this means that all items stored in the s file will be lost such as essbase app/db configuration settings, filters.

  If you want to try this method, stop essbase, rename essbase.sec to any name, rename ESSBASE. BAK_preUPM to essbase.sec
  Start essbase and it should be in native mode, you should be able to hopefully convert in hss mode then.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• Security of Shared Services... Urgent

  Hello
  
  We installed the Hyperion 9.3.1 product suite and outsourced shared services users. We have planning, reporting of the components as well.
  We have the same safety management which is present in attempts to connect to Essbase before user disabled, inactive days etc.
  If so, how to set it to shared services so that it applies to all users through different products.
  
  Appreciate your answers, thank you

  Hello

  I don't think you can force users to be inactive before number of bad openings, inactive days etc. are not valid in Shared native directory services. I believe that this is because the shared services is shared by multiple applications, etc.

  Normally, TAM, MSAD, etc. is used to force users to change their passwords, the duration, after which the password, etc.. These external directory services are user and leaves Hyperion management tools is for them.

  Let me know if it helps.

  See you soon
  RS

• Tables of the database for users of Shared Services

  Hi all

  I'm discovering in the database tables, know when a user has been added as a group in Shared Services. This is for purposes of SOX. Can you let me know which database table, we need to check that we can get a timestamp date for added user?

  We use HFM 11.1.2.2 and Microsoft SQL server

  Thank you

  Steffi.

  Hey Steffi,

  I don't know any tables db HSS that contain this timestamp.  The CSS_GROUP_MEMBERS table lists groups/members, but no other information.  There are the timestamps for the CSS_USERS and CSS_GROUPS tables, but they show only when Aboriginal users/groups have been created and updated.

  The best way to record this information for your next audit would be to enable auditing of Shared Services.  To do this:

  • HSS > Administration > configure audit
  • Enable audit value
  • Select the items that you want to audit (Directory Management has elements such as 'Assign the user as a member of the group' and 'Remove user as a member of the group'
  • Restart the Services

  Thank you

  Erich

• Export the list of Shared Services Hyperion users [EPM11.1.2.2]

  Hi all

  I used to get the list of users of native directories by using the query:

  Select * from CSS_USERS;

  I watched the rest of the tables of Shared Services and could not find the 'username' of the accounts stored in the external directory. Everything I could find are users AD matching GUID. eg. msad://OBJECTGUID= \f7\70\aa\c1\fb\0f\61\4e\95\b9\e5\f8\1e\8b\23\43? USER

  Is there an easier way to get a list of users provisioned within the Hyperion?

  As a solution, I have manually draw the details of users using LCM. is there a way I could automate this?

  UPDATE *.

  -Version EPM: 11.1.2.2

  Thank you

  Kent

  Finally, I used Utility.sh to export the groups to a file called Groups.csv - it made me the list of AD users added to an indigenous group Directory.

  ---

  Reference for people EPM11.1.2.2 - utility using life cycle management

  For example.

  $ sh Utility.sh /path/Oracle/Middleware/user_projects/epmsystem1/import_export/2013-10-30__NativeDirectory_Users_Groups/Export.xml
  > Enter username - admin
  > Enter the password.

  Migration of artifacts of Foundation/Shared Services/path/Oracle/Middleware/user_projects/epmsystem1/what/2013-10-30__NativeDirectory_Users_Groups/HSS-Shared Services

  Artifact exported - users.

  Artifact exported - groups.

  Migration status - success
  $

• Import of security through caused shared services admin user password chang

  Hello
  
  I exported the SSP url for shared environment and any services in another environment. This changed the admin password which I imported.
  
  
  Details:-
  
  I went to share the services of an environment say dev and to-> application-> Foundation-> shared and exported services groups. Has taken its export and imported into the test environment.
  
  Now that he has changed the user password of the target with the source one. However, I remove the internal ID of all the files inside.
  
  Can someone please help? How to recover the password of it? I have no back up of the test environment shared services.
  
  Version 11.1.2.1
  
  Thank you very much in advance!

  I was hoping you had a strategy in place, it's basically restore the relational database of shared services from a backup, stop the epm services first.
  It is even possible to fix your LCM file and set the admin to the way it should be, but I do not know what state the commissioning is to thus could not guarantee it would work.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• Corporate user - shared Services - planning accounts

  Hello
  
  I have a question related to the user in company accounts.
  
  Suppose that it is applied a corporate identity that has had access to the planning was required in shared services provisioning and security at the level of the dimension. This user no longer works for the Organization now and corporate identity, therefore, is not more active.
  
  What happens in the planning and shared services. He will always have a record of this account, and we will need to manually clear it situation every time like this happens, or because it is an identity corporate shared services and planning know for himself that this ID is not active and valid.
  
  I would be grateful if someone could remove this doubt.
  
  Thanks in advance.
  ~ Hervé
  
  Published by: Guylaine Sep 22, 2011 10:43

  In theory if the account of the announcement is no longer so the provisioning is removed, now in the past there has been problems where if you don't service user first, before getting deleted from the announcement then the user still exists in some tables and becomes bland.
  Sometimes utility like provsionusers and updateusers to synchronize up to shared services and delete all obsolete users, sometimes, they had to be removed manually.
  I have not really tested or seen what is happening with the latest version to see if he actually manages to clean all obsolete users without any problem.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• When fixing a user profile service failed, I ended up creating an additional profile and now do not know how to do this

  I was trying to solve a failure of service user profile on windows 7. I stupidly however restarted my computer before going through all the steps listed here: http://support.microsoft.com/kb/947215/en-gb this title I do not know now how I need to go back to my old profile. The original profile is currently. BK at the end is the folder, while the temperature a. BAK and the new profile has nothing in the end.  If anyone can help guide me on the right track, I would be very grateful.

  Hello

  See if this helps you; He will often work with 'profile '. »

  1 do a Safe Mode system restore to before the problem:

  http://www.SevenForums.com/tutorials/700-system-restore.html

  Enter the Mode Windows safe. Use the arrow keys to navigate and the ENTER key to select Mode (which is where you have already gone)

  http://www.computerhope.com/issues/chsafe.htm#03

  See you soon.

• Change password for the DN of the user: (MSAD config) Shared Services

  We have the MSAD service account to configure shared with MSAD services. E.M.P. version 11.1.2.3

  As a policy, we change the password for this account. Since we do not have shared services link works in this version.

  Will work the steps below?

  1. modify the password for the service account in MSAD

  2. connect to the workspace with other admin MSAD (my user id) id

  3. change the password for Shared services configuration MSAD, under "set up user directories.

  If this approach does not work, is there another way to do this?

  One solution is to change the workspace-> administer-> workspace server

  settings-> "allow direct connection after the failure of the SINGLE sign-on:" = Yes

  This will allow you to connect without SSO assuming that there are problems with the SSO.

  (assuming you can change pw back so you can connect to the workspace).

• How to create users in bulk in Hpyerion Shared Services Console

  Hi all

  I need to create users in bulk in the Shared Services Console. Since I have many users, so I don't want to use Front End. Instead, I prefer to download a CSV of things sort.

  For this I export the console shared services and open the file Users.csv.

  Now my plan is to add all my users here and then going to import this backup of the Shared Services Console.

  The only point where I am confused is that how should I indicate the passwords encrypted in the file Users.csv and also what should I write in the column "internal_id."

  If you use LCM and native users then you should be able to enter a uncrypted password and when it is imported, it must be encrypted.

  Leave empty internal id column for new users, by creating a new test user.

  See you soon

  John

  http://John-Goodwin.blogspot.com/

• migration of users to 9.2.1 to 11.1.1.4 Hyperion Shared Services

  Hi all
  I used CSSExport.bat to export users of Hyperion 9.2.1 shared services, when iam trying to import users with CSSImport.bat its throwing error log4j, leaving no error on newspapers. I asked an application with Oracle, they said that using CSSImport.bat will not work in Hyperion 11.1.1.4.and we do not use LCM too. At this point they say 11.1.1.4 is a maintenance application so that we cannot do something in this part.
  
  Can I have any other option to workaround.
  appriciate your help

  I find the best way to get used to the format required for LCM of first provision a user/group in shared services and then to perform an export of LCM, will give you an idea of the required format.
  Change the output files with your new setting and then test the Import FCL through shared Services, if it works then create an XML migration when running step by step through the stages of SSP and then you should be fine using the command line utility.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• How to export users and groups Active Directory of hyperion shared services

  Hello

  We are on 11.1.2.3 and in a situation where we need to export all users and groups of shared services, including the native directory and Active Directory users and groups.

  
  

  Current method of LCM export only the NativeDirectory user and groups. -is this correct?

  
  

  Is there a way to export all users and groups including NativeDirectory and ActiveDirectory?

  
  

  Please suggest.

  
  

  Thank you

  I don't think that there is a way to make the groups and users to the AD, and I wouldn't.

  You need to connect the next AD system and pull on the users and groups in this way.

• WARNING when saving the changes after adding the user to the shared services

  Hi all

  I added a user in shared and all services, saving the changes I get this warning

  

  Is it safe to ignore this warning, what am I supposed to drop after you save the changes

  If you added the user in Shared Services, then no problem to save it.

  Thank you

  Mady