Hyperion Planning: Failed to create security filters for the following Users: xxxxxx

We have faced one issue with one of our customer. Issue is Client side Administrator removed MSAD user which has access Hyperion Planning application. But after deleting that user, Planning Security filters give below error.

When refreshing, this issue we are facing. W

Solution:

We have verified HSP tables for this user like hsp_object, hsp_mru_members, hsp_user_prefs, hsp_pm_out_of_office, hsp_users, hsp_adhoc_opts etc. We may have references in other tables also. But in our case we didn't find any.


Delete from hsp_mru_members where object_id = '123456'
Delete from hsp_user_prefs where object_id = '123456'
Delete from hsp_pm_out_of_office where object_id = '123456'
Delete from hsp_users where object_id = '123456'
Delete from hsp_object where object_name='abdcef'
Delete from hsp_adhoc_opts where object_id = '123456'

Once done, check out you are refresh or not from Planning application.

Note: while deleting entries from these tables, take backup of schema and also check out any primary key, secondary key references are there.

Reference:

Hyperion Planning Unable To Refresh Security Filter Failing on one Specific LDAP User Error:"Failed to create security filter for user " (Doc ID 1961167.1)

Thanks,

Mady

Hyperion Planning: Enabling Access to Planning Artifacts On Mobile Devices

To work with artifacts such as forms, task lists, and business rules on mobile devices using the simplified interface, administrators must enable access to those artifacts for users.

To enable access to Planning artifacts on mobile devices:

1. Login to Workspace, then go to particular Planning application, then Select Administration, then Manage, and then Tablet Access.
2. In Tablet Access Setup, select the Forms, Tasks, and Rules tabs to view and select the artifacts that you want to enable.
3. You can use Hyperion Planning Url to access simplified interface:
   http://<servername>:<port>/HyperionPlanning

You can check here what ever you have access in Hyperion Planning application. for example: Forms, Tasks, Rules, Reports(whatever connected with this application)

Thanks,

Mady

Hyperion Financial Reporting: Accessing Financial Reporting From a Mobile Device

To access Financial Reporting from a mobile device:

1.    Open a new browser page.

2.    Enter one of the following URLs:

http://server:port/hr/mobile/HRMobileLogon.jsp
https://server:port/hr/mobile/HRMobileLogon.jsp
where server:port is the address for your server and port.

3.    Enter user name and password, when prompted. Press OK.

The Financial Reporting repository is displayed.

Reference: 

https://docs.oracle.com/cd/E40248_01/epm.1112/fr_mobileuser/frameset.htm?launch.html

Thnaks,

Mady

HFM dssstartup Option in Hyperion 11.1.2.4

It is possible that sometimes Xfmdataosurce tends to get hung and will not shutdown gracefully. But it should be a rare scenario and not happening regularly. Also We need make sure DB is fine and there is no network issues or other environmental issues.

Generlly dsstartup option as 0 which is default. This means when application will be shutdown automatically when the last user logs out. Frequent shutdown and startup can also cause issues sometimes. It is better to make dsstartup option to 2 which means application datasource starts when first user tries to login and will be active until HFM Java services are stopped.

To do this open Workspace go to Navigate->Administer->Consolidation Administration->System-> Settings-> Look for DSSStartup options in the list of settings and change the value to 2 and save it, Log out and Restart HFM Services for changes to take affect.


Thanks,
Mady

Weblogic Managed server showing up as Unknown status

We have installed and configured Hyperion 11.1.2.4 Shared services in 2 servers as part of Load Balancing requirement for one of client.

We got 2 foundation services in weblogic but whenever we have started Admin Server, Foundation Services and check Managed Servers status. One server showing up as Running Status but another is showing up as Unknown.

As part of troubleshoot, initially we have restarted services, no luck, Then cleared tmp and cache, no luck. Redeployed and foundation in server2 still it is showing up as Unknown.

Here we have observed 2 things, Server Host names. Server1 showing up short name but Server2 is in fully qualified name. For this tried to add hostnames with short, fdqn with IP address. Services running in second server but Unknown status not changed.

Whenever we restarted services, we observed that Foundation is communicating with IPV6 but IPV4.

So we have disabled IPv6, then restarted foundation service on Server2. Now Status showing up as Running.

Thanks,
Mady

Auditing in Shared services

Going through some posts in OTN forums, found some information which will be useful.

Information is about who provisioned/created/deleted/updated users from shared services

CSS_IDENTITY and CSS_PROVISIONING_INFO which provide all relevant information.

Shared Services audit tables start SMA_AUDIT_* , for example SMA_AUDIT_FACT

For detailed explanation about data models, check out below link:
https://docs.oracle.com/cd/E57185_01/epm_data_models.zip

Thanks,
Mady

MSAD Configuration

Most of the clients will use Active Directory which we can integrate with Hyperion Shared Services.

We need AD server details, username, password for communication, Ports we use for connectivity.

Check out below screen shots to setup and AD in Hyperion Shared Services.

Go to Shared Services console - Native directories - Administration - Configure User directories - Click on New - Enter the details which we got or collected from AD team - Click on Finish.

Try to search/retrieve AD users now in MSAD group. 

We need to keep MSAD in Top in list, because in case of searching if we put AD in first and it will go through AD first then Native. 

Note: whenever we do setup and do changes or change order of MSAD in list, we need to bounce Services to take effect.

Thanks,

Mady

EPMA Application Library and Dimension Library not opening

Hyperion 11.1.2.4 installation and configuration completed, but when try to open Application Library and Dimension Library, we are getting below error:

; nested exception is: 
  HTTP transport error: javax.xml.soap.SOAPException: oracle.j2ee.ws.saaj.ContentTypeException: Not a valid SOAP Content-Type: text/html; charset=utf-8"

Oracle Support Article Soultion:

Accessing Application Library from Workspace Get Errors "HTTP transport error: javax.xml.soap.SOAPException: oracle.j2ee.ws.saaj.ContentTypeException: Not a valid SOAP Content-Type: text/html; charset=utf-8" (Doc ID 1932114.1)

1.  Right click on E:\Oracle\Middleware\EPMSystem11R1\products\Foundation\BPMA\AppServer\DimensionServer\WebService\web.config and click on Properties.
2.  Click on Security.
3.  Click on Edit.
4.  If SYSTEM is not listed, click on Add, Type "SYSTEM" Click on "Check Names"
5.  Click on SYSTEM and click Allow Check box for "Full Control"
6.  Click Ok
7.  Stop EPMA Services
8.  Stop Microsoft Internet Information Services (IIS)
9.  Start Microsoft Internet Information Services (IIS)
10. Start EPMA Services

One more tip from John Goodwin:

To prove whether it is an issue with the ApplicationPoolIdentity identity, you can go to the default app pool in IIS and change the identity, then restart IIS.

Changing local system will work for application library and dimension library accessing.

Thanks,
Mady