Hyperion Documents

1
Controlling Access
Created By Amit Sharma Hyperion/OBIEE
Trainer learnhyperion.wordpress.com
2
Essbase security filters give you control over
security at the most detailed level. Filters let
you control access to individual data within a
database, by defining what kind of access is
allowed to which parts of the database, and to
whom these settings apply. Any cells that are not
specified in the filter definition inherit the
database access level.
3
Filtering Examples
Simple Example create filter 'Sample'.'Basic'.'
filter1' read on '"New York"'
Member Selection create filter
'Sample'.'Basic'.'Filter2' read on '_at_ICHILDREN
("100")'
Multiple Selection create filter
sample.basic.filt1 read on 'Jan, sales',
no_access on '_at_CHILDREN(Qtr2)'
Attribute Members create or replace filter
sample.basic.filt1 read on 'Sales,
_at_ATTRIBUTE(Bottle)'
Compound Filter create or replace filter
'Sample'.'Basic'.'Filter4' read on
'_at_IDESCENDANTS ("East"),"100-20, write on
'_at_IDESCENDANTS ("West")'
Definition Specific create or replace filter
sample.basic.filter6 read on 'Jan,Feb sales',
no_access on '_at_CHILDREN(Qtr2)' definition_only
4
(No Transcript)
5
Shared Service Introduction
6

• Shared Services integrates the products to
  provide these functionalities
• User provisioning
• External authentication definition
• Task flow management

• Shared Services Server
• The Shared Services server components
• Databases (relational and OpenLDAP)
• Web application server
• User Management Console

7
Global Roles
Administrator
The Administrator role provides control over all
products that integrate with Shared Services.
Directory Manager
Users who are assigned the Directory Manager role
can create and manage users and groups within
Native Directory.
Project Manager
Users who are assigned the Project Manager role
can create and manage projects within Shared
Services.
8
(No Transcript)
9
(No Transcript)
10
(No Transcript)
11
(No Transcript)
12
(No Transcript)
13
(No Transcript)
14
Shared Services Backup

• To create a hot backup of OpenLDAP
• 1 Ensure that the Shared Services database
  is in online backup mode
• 2 Run these commands
• Windows ltHSS_HOMEgt\server\scripts\back
  up.bat backup_folder_name
• UNIX ltHSS_HOMEgt/server/scripts/backup.
  sh backup_folder_name
• where ltHSS_HOMEgt is the Shared
  Services installation location and
• backup_folder_name is the path to the
  backup folder.
• Windows example
• c\hyperion\SharedServices\9.3\server
  \scripts\backup.bat c\HSS_backup
• UNIX example
• /home/username/Hyperion/SharedServices
  /9.3/server/scripts/backup.sh/
• home/username/HSS_backup
• 3 Optional Copy the backup folder to a
  backup device, such as a CD-ROM, alternate disk,
  or tape.

15
Shared Services Recovery

• For a catastrophic recovery, run these commands
• Windows ltHSS_HOMEgt\server\scripts\recover.bat
  backup_folder_name
• catRecovery
• UNIX ltHSS_HOMEgt/server/scripts/recover.sh
  backup_folder_name
• catRecovery
• where ltHSS_HOMEgt is the Shared Services
  installation location and
• backup_folder_name is the path to the backup
  folder.
• Windows example
• c\hyperion\SharedServices\9.3\server\scripts\reco
  ver.bat c
• \HSS_backup catRecovery
• UNIX example
• /home/username/Hyperion/SharedServices/9.3/server/
  
• scripts/recover.sh/home/username/HSS_backup
  catRecovery
• To ensure that the Shared Services relational and
  OpenLDAP databases are synchronized, run the Sync
  Native Directory (OpenLDAP) utility.

16
Trouble Shooting LDAP Database Recovery
C\Hyperion\products\Foundation\openLDAP\bdb\bin\
db_recover -v -h C\Hyperion\products\Foundation\o
penLDAP\var\openldap-data -t 04101200
17

• THANK YOU
• To learn more about hyperion please visit
• http//learnhyperion.wordpress.com