Download - Controlling accesst 1 aug
![Page 1: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/1.jpg)
Controlling Access
Created By : Amit SharmaHyperion/OBIEE Trainerlearnhyperion.wordpress.com
![Page 2: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/2.jpg)
Essbase security filters give you control over security at the most detailed level. Filters let you control access to individual data within a database, by defining what kind of access is allowed to which parts of the database, and to whom these settings apply. Any cells that are not specified in the filter definition inherit the database access level.
Essbase security filters give you control over security at the most detailed level. Filters let you control access to individual data within a database, by defining what kind of access is allowed to which parts of the database, and to whom these settings apply. Any cells that are not specified in the filter definition inherit the database access level.
![Page 3: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/3.jpg)
Filtering ExamplesFiltering Examples
Multiple Selection :create filter sample.basic.filt1 read on 'Jan, sales', no_access on '@CHILDREN(Qtr2)';
Multiple Selection :create filter sample.basic.filt1 read on 'Jan, sales', no_access on '@CHILDREN(Qtr2)';
Attribute Members : create or replace filter sample.basic.filt1 read on 'Sales, @ATTRIBUTE(Bottle)';
Attribute Members : create or replace filter sample.basic.filt1 read on 'Sales, @ATTRIBUTE(Bottle)';
Simple Example: create filter 'Sample'.'Basic'.' filter1' read on '"New York"';Simple Example: create filter 'Sample'.'Basic'.' filter1' read on '"New York"';
Member Selection: create filter 'Sample'.'Basic'.'Filter2' read on '@ICHILDREN ("100")' ;
Member Selection: create filter 'Sample'.'Basic'.'Filter2' read on '@ICHILDREN ("100")' ;
Compound Filter : create or replace filter 'Sample'.'Basic'.'Filter4' read on '@IDESCENDANTS ("East"),"100-20“’,write on '@IDESCENDANTS ("West")';
Compound Filter : create or replace filter 'Sample'.'Basic'.'Filter4' read on '@IDESCENDANTS ("East"),"100-20“’,write on '@IDESCENDANTS ("West")';
Definition Specific : create or replace filter sample.basic.filter6 read on 'Jan,Feb sales', no_access on '@CHILDREN(Qtr2)' definition_only;
Definition Specific : create or replace filter sample.basic.filter6 read on 'Jan,Feb sales', no_access on '@CHILDREN(Qtr2)' definition_only;
![Page 4: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/4.jpg)
![Page 5: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/5.jpg)
Shared Service IntroductionShared Service Introduction
![Page 6: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/6.jpg)
Shared Services integrates the products to provide these functionalities:
User provisioning External authentication definition Task flow management
Shared Services integrates the products to provide these functionalities:
User provisioning External authentication definition Task flow management
Shared Services ServerThe Shared Services server components:Databases (relational and OpenLDAP)Web application serverUser Management Console
Shared Services ServerThe Shared Services server components:Databases (relational and OpenLDAP)Web application serverUser Management Console
![Page 7: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/7.jpg)
Global RolesGlobal Roles
AdministratorAdministrator The Administrator role provides control over all products that integrate with Shared Services.
The Administrator role provides control over all products that integrate with Shared Services.
Directory ManagerDirectory ManagerUsers who are assigned the Directory Manager role can create and manage users and groups within Native Directory.
Users who are assigned the Directory Manager role can create and manage users and groups within Native Directory.
Users who are assigned the Project Manager role can create and manage projects within Shared Services.
Users who are assigned the Project Manager role can create and manage projects within Shared Services.
Project Manager
![Page 8: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/8.jpg)
![Page 9: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/9.jpg)
![Page 10: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/10.jpg)
![Page 11: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/11.jpg)
![Page 12: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/12.jpg)
![Page 13: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/13.jpg)
![Page 14: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/14.jpg)
Shared Services Backup• To create a hot backup of OpenLDAP:
• 1 Ensure that the Shared Services database is in online backup mode• 2 Run these commands:• Windows: <HSS_HOME>\server\scripts\backup.bat backup_folder_name• UNIX: <HSS_HOME>/server/scripts/backup.sh backup_folder_name• where <HSS_HOME> is the Shared Services installation location and • backup_folder_name is the path to the backup folder.• Windows example:• c:\hyperion\SharedServices\9.3\server\scripts\backup.bat c:\
HSS_backup• UNIX example:•
/home/username/Hyperion/SharedServices/9.3/server/scripts/backup.sh/• home/username/HSS_backup• 3 Optional: Copy the backup folder to a backup device, such as a CD-ROM,
alternate disk, or tape.
![Page 15: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/15.jpg)
Shared Services Recovery• For a catastrophic recovery, run these commands:• Windows: <HSS_HOME>\server\scripts\recover.bat backup_folder_name• catRecovery• UNIX: <HSS_HOME>/server/scripts/recover.sh backup_folder_name• catRecovery• where <HSS_HOME> is the Shared Services installation location and• backup_folder_name is the path to the backup folder.
• Windows example:• c:\hyperion\SharedServices\9.3\server\scripts\recover.bat c:• \HSS_backup catRecovery
• UNIX example: • /home/username/Hyperion/SharedServices/9.3/server/• scripts/recover.sh/home/username/HSS_backup catRecovery• To ensure that the Shared Services relational and OpenLDAP databases are
synchronized, run the Sync Native Directory (OpenLDAP) utility.
![Page 16: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/16.jpg)
Trouble Shooting LDAP Database Recovery C:\Hyperion\products\Foundation\openLDAP\bdb\bin\db_recover -v -h C:\Hyperion\products\Foundation\openLDAP\var\openldap-data -t 04101200
Trouble Shooting LDAP Database Recovery C:\Hyperion\products\Foundation\openLDAP\bdb\bin\db_recover -v -h C:\Hyperion\products\Foundation\openLDAP\var\openldap-data -t 04101200
![Page 17: Controlling accesst 1 aug](https://reader033.vdocuments.us/reader033/viewer/2022061117/5467ca21af7959650e8b5adf/html5/thumbnails/17.jpg)
THANK YOU
To learn more about hyperion please visithttp://learnhyperion.wordpress.com