Security Migration for a Planning Application from 11.1.1.x to 11.1.2.2


When it comes to Planning Security we have to grant it at two levels:
1. Planning application roles 
2. Planning artifacts access  

Planning application roles are granted in Shared Services and Planning artifacts access such as Web forms and dimensions/members are maintained and defined from a Planning user interface.
Security on these artifacts is defined from within the Planning application. Planning artifacts are stored in the Planning relational repository.

So, if you planning to migrate security for an application which is in 11.1.1.x to 11.1.2.2, the best way is to use the typical upgrade approach but in case you cant use that, here is an approach in which we will be using the 11.1.1.3 LCM back to Restore it in 11.1.2.2.

Here is an outline how we will be doing that, we will export security from version 11.1.1.3 using LCM, edit the files convert them in 11.1.2.2 supportable format and then will perform LCM import.

In this blog post will only be taking care of Assigned role sheet because that is the most important one. If you open the assigned role file exported from version 11.1.1.3, say from           "<IMPORT_EXPORT FOLDER>\<USER_NAME>\resource\Native Directory\Assigned Roles\Planning Application" location 

Number of columns are same in both version but important thing to note here is in version 11.1.1.3 roles are mentioned directly in the role_id column and Product Type is HP-9.5.0, rest everything is same in the export of both version.


Here is a sample export from version 11.1.2.2, here roles are the following format:
native://DN=cn=HP:0003,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE

There Oracle tried to sync the format of SIDs and Role_ids, all you need to do is to find the mapping between a role and its role Id, here are few for you:HP:0001 is for Planner,
HP:0002 is for Interactive Users,
HP:0003 is for Admin etc

Remember there are few additional roles in 11.1.2.2 and few roles are not present in the newer version. Check Shared services security guide to check the roles and find which one you want to map with an existing role.

Once the files are mapped and changes are made try importing the backup:



Here I was able to do it successfully, in the same way you export the Planning application artifacts access modify the file and import that as well.

All the best!

Cheers..
Rahul S.

Comments

Post a Comment

Popular posts from this blog

Multiple Navigation Flows are Active

Image
We have witnessed an issue where application migration or sometimes service restart in PBCS/EPBCS activates multiple navigation flows.  If multiple navigation flows are active you wont be able make changes in any of them, because in order to make change in navigation flow you have to make it inactive. Typically you may end up in following situation:  Solution is pretty simple: 1. Create a copy of any of the existing navigation flow:  2. Give it any desired name:  3. Now, you will see one additional navigation flow, with inactive status: 4.  Make it active: 5.  At this point of time you will have one active navigation flow and two inactive  6. Select the additional navigation flow you have created and delete it  7. Now you are back in business: Rahul S.
Read more

The Member Does Not Exists For The Specified Cube

Image
The member "" does not exist for the specified cube or you do not have access to it. Issue:  If you are running into a issue, where for a RTP member selection is throwing an error for a missing member, this regardless of the member you have selected in RTP or regardless of rule. You may be able to execute the rule from Calc Manager and not from Planning. Reason: You may run into this issue if: 1. You have added members in Planning and have not refreshed the cube 2. For the default value of a RTP in calc member you have a member which is not valid any more for planning application 3. For the default value of a RTP in calc member you have a member which is not valid any more for a plan type Solution: 1. Refresh cube 2. Update Default value of RTP which is causing issue to member which exists 3. Deploy the rule Rahul S.
Read more

"Smart View handled an unknown exception thrown by Microsoft Office" Error on Vista, Windows 7, Windows 2008

My MS-Office Components are Crashing After Installing Smart View on Vista, Windows 7, Windows 2008! This is one more one pretty common issue,   "Smart View handled an unknown exception thrown by Microsoft Office."   This is actually a known issue in version 11.1.2.1. If you look at the read me of Smart View you will find bug# 11696583 "On Vista, Windows 2008, and Windows 7 operating systems, Excel may terminate abruptly upon launching after you install Smart View. Workaround: Turn off “User Access Control” in User Accounts, available from the Control Panel." Here is the link to read me: http://download.oracle.com/docs/cd/E17236_01/epm.1112/readme/sv_1112100_readme.html When the User Access Controls are on Smart View faces problem in registering, when you set it off Smart View register itself like a charm. To have more information on UAC: http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx Now, when y...
Read more