Hi,

My configuration :

Hyperion Planning 11.1.2.1 - Shared services security mode

I am trying to create security filters and to assign it to a group of users.

1- In Shared services :
- Create group1
- Cretae user1

2- In Plnning :
- assign access to members (Administartion Dimension menu) to group1

3-Planning

- refreesh security -> filters created in Essbase

4- I've created a filter Rtest and I'd like to assign it to group1 !!

Question : is it possible to assign my filter (Rtest) to the group if the Planning application is in a Shared services security mode. If yes how can I do that ?

Thanks

Ed S

You can do that with MaxL.

You can run this examples on the MaxL editor of EAS.




To create Filter...

create or replace filter ACESSO.ACESSO.'fTESTE_NONE_ANO' NONE on '@IDESCENDANTS("Ano")';

create or replace filter ACESSO.ACESSO.'fTESTE_READ_ANO' READ on '@IDESCENDANTS("Ano")';



To Grant filter to a Group....

grant filter ACESSO.ACESSO.'fTESTE_NONE_ANO' to 'GL-ACESSO_META-ADMINISTRADOR_ANALYZER';

grant filter ACESSO.ACESSO.'fTESTE_READ_ANO' to 'GL-ACESSO_META-ADMINISTRADOR_ESSBASE';

Hi Leonardo,

Thank you for your response.

This what I have already done but I have the following error message when I run the grant :

Can not modify access permissions on Planning application [myapp] in Shared services mode !


Any ideas ?

Thanks

Ed S

Sorry for not jumping into this -- all of my "free" time has been busy writing a (hopefully) interesting and slightly involved blog post on a different subject lately.

Short answer: use alter filter.

Long answer: http://camerons-blog-for-essbase-hackers.blogspot.com/2009/07/fixing-plannings-filters.html

Regards,

Cameron Lackpour

Thank you Cameron.

I'll check and let you know.

Thanks

Hi Cameron,

I am still facing the same problem ...

Is there any way to implement the following security in a Planning application ?

User1 needs to have the following access rights :

write Acc1,Acc2,Acc3
read Acc1,Entity1
read Acc2,Entity2,Company3

User1 should have write access to all the entities for Acc1 except Entity1, and so on.

Thanks

Planning, unfortunately, does NOT do what you want, which is to handle that read of Account1 & Entity1 exclusively and a read of Acc2 & Entity1 & Entity2 exclusively.

That's not even touching the Write functionality.

The best way to do what you describe is through forms and form security. It is a royal pain and blows up (or can) with adhoc Planning forms if the scope is wide enough.

Regards,

Cameron Lackpour