Security Migration for a Planning Application from 11.1.1.x to 11.1.2.2

When it comes to Planning Security we have to grant it at two levels:

1. Planning application roles 

2. Planning artifacts access  

Planning application roles are granted in Shared Services and Planning artifacts access such as Web forms and dimensions/members are maintained and defined from a Planning user interface.

Security on these artifacts is defined from within the Planning application. Planning artifacts are stored in the Planning relational repository.

So, if you planning to migrate security for an application which is in 11.1.1.x to 11.1.2.2, the best way is to use the typical upgrade approach but in case you cant use that, here is an approach in which we will be using the 11.1.1.3 LCM back to Restore it in 11.1.2.2.

Here is an outline how we will be doing that, we will export security from version 11.1.1.3 using LCM, edit the files convert them in 11.1.2.2 supportable format and then will perform LCM import.

In this blog post will only be taking care of Assigned role sheet because that is the most important one. If you open the assigned role file exported from version 11.1.1.3, say from           "<IMPORT_EXPORT FOLDER>\<USER_NAME>\resource\Native Directory\Assigned Roles\Planning Application" location 

Number of columns are same in both version but important thing to note here is in version 11.1.1.3 roles are mentioned directly in the role_id column and Product Type is HP-9.5.0, rest everything is same in the export of both version.

Here is a sample export from version 11.1.2.2, here roles are the following format:

native://DN=cn=HP:0003,ou=HP,ou=Roles,dc=css,dc=hyperion,dc=com?ROLE There Oracle tried to sync the format of SIDs and Role_ids, all you need to do is to find the mapping between a role and its role Id, here are few for you:HP:0001 is for Planner, HP:0002 is for Interactive Users, HP:0003 is for Admin etc Remember there are few additional roles in 11.1.2.2 and few roles are not present in the newer version. Check Shared services security guide to check the roles and find which one you want to map with an existing role. Once the files are mapped and changes are made try importing the backup: Here I was able to do it successfully, in the same way you export the Planning application artifacts access modify the file and import that as well. All the best! Cheers.. Rahul S.