Controlling Access

Created By : Amit SharmaHyperion/OBIEE Trainerlearnhyperion.wordpress.com

Essbase security filters give you control over security at the most detailed level. Filters let you control access to individual data within a database, by defining what kind of access is allowed to which parts of the database, and to whom these settings apply. Any cells that are not specified in the filter definition inherit the database access level.

Essbase security filters give you control over security at the most detailed level. Filters let you control access to individual data within a database, by defining what kind of access is allowed to which parts of the database, and to whom these settings apply. Any cells that are not specified in the filter definition inherit the database access level.

Filtering ExamplesFiltering Examples

Multiple Selection :create filter sample.basic.filt1 read on 'Jan, sales', no_access on '@CHILDREN(Qtr2)';

Multiple Selection :create filter sample.basic.filt1 read on 'Jan, sales', no_access on '@CHILDREN(Qtr2)';

Attribute Members : create or replace filter sample.basic.filt1 read on 'Sales, @ATTRIBUTE(Bottle)';

Attribute Members : create or replace filter sample.basic.filt1 read on 'Sales, @ATTRIBUTE(Bottle)';

Simple Example: create filter 'Sample'.'Basic'.' filter1' read on '"New York"';Simple Example: create filter 'Sample'.'Basic'.' filter1' read on '"New York"';

Member Selection: create filter 'Sample'.'Basic'.'Filter2' read on '@ICHILDREN ("100")' ;

Member Selection: create filter 'Sample'.'Basic'.'Filter2' read on '@ICHILDREN ("100")' ;

Compound Filter : create or replace filter 'Sample'.'Basic'.'Filter4' read on '@IDESCENDANTS ("East"),"100-20“’,write on '@IDESCENDANTS ("West")';

Compound Filter : create or replace filter 'Sample'.'Basic'.'Filter4' read on '@IDESCENDANTS ("East"),"100-20“’,write on '@IDESCENDANTS ("West")';

Definition Specific : create or replace filter sample.basic.filter6 read on 'Jan,Feb sales', no_access on '@CHILDREN(Qtr2)' definition_only;

Definition Specific : create or replace filter sample.basic.filter6 read on 'Jan,Feb sales', no_access on '@CHILDREN(Qtr2)' definition_only;

Shared Service IntroductionShared Service Introduction

Shared Services integrates the products to provide these functionalities:

User provisioning External authentication definition Task flow management

Shared Services integrates the products to provide these functionalities:

User provisioning External authentication definition Task flow management

Shared Services ServerThe Shared Services server components:Databases (relational and OpenLDAP)Web application serverUser Management Console

Shared Services ServerThe Shared Services server components:Databases (relational and OpenLDAP)Web application serverUser Management Console

Global RolesGlobal Roles

AdministratorAdministrator The Administrator role provides control over all products that integrate with Shared Services.

The Administrator role provides control over all products that integrate with Shared Services.

Directory ManagerDirectory ManagerUsers who are assigned the Directory Manager role can create and manage users and groups within Native Directory.

Users who are assigned the Directory Manager role can create and manage users and groups within Native Directory.

Users who are assigned the Project Manager role can create and manage projects within Shared Services.

Users who are assigned the Project Manager role can create and manage projects within Shared Services.

Project Manager

Shared Services Backup• To create a hot backup of OpenLDAP:

• 1 Ensure that the Shared Services database is in online backup mode• 2 Run these commands:• Windows: <HSS_HOME>\server\scripts\backup.bat backup_folder_name• UNIX: <HSS_HOME>/server/scripts/backup.sh backup_folder_name• where <HSS_HOME> is the Shared Services installation location and • backup_folder_name is the path to the backup folder.• Windows example:• c:\hyperion\SharedServices\9.3\server\scripts\backup.bat c:\

HSS_backup• UNIX example:•

/home/username/Hyperion/SharedServices/9.3/server/scripts/backup.sh/• home/username/HSS_backup• 3 Optional: Copy the backup folder to a backup device, such as a CD-ROM,

alternate disk, or tape.

Shared Services Recovery• For a catastrophic recovery, run these commands:• Windows: <HSS_HOME>\server\scripts\recover.bat backup_folder_name• catRecovery• UNIX: <HSS_HOME>/server/scripts/recover.sh backup_folder_name• catRecovery• where <HSS_HOME> is the Shared Services installation location and• backup_folder_name is the path to the backup folder.

• Windows example:• c:\hyperion\SharedServices\9.3\server\scripts\recover.bat c:• \HSS_backup catRecovery

• UNIX example: • /home/username/Hyperion/SharedServices/9.3/server/• scripts/recover.sh/home/username/HSS_backup catRecovery• To ensure that the Shared Services relational and OpenLDAP databases are

synchronized, run the Sync Native Directory (OpenLDAP) utility.

Trouble Shooting LDAP Database Recovery C:\Hyperion\products\Foundation\openLDAP\bdb\bin\db_recover -v -h C:\Hyperion\products\Foundation\openLDAP\var\openldap-data -t 04101200

Trouble Shooting LDAP Database Recovery C:\Hyperion\products\Foundation\openLDAP\bdb\bin\db_recover -v -h C:\Hyperion\products\Foundation\openLDAP\var\openldap-data -t 04101200

THANK YOU

To learn more about hyperion please visithttp://learnhyperion.wordpress.com