Planning Attached ASO Cube Security with HFR and SmartView

                                

Audience:  Hyperion Solution Architects and Hyperion Database Administrator

Planning 11.1.2.3 provides an option to create ASO cube as part of planning application. I should be using word plan type rather than cube because it’s part of planning application. Creating ASO as plan type creates new ASO application on Essbase server. Planning reads ASO a plan type but Essbase does not. 

I have created a Planning application with five plan types including “Report-ASO” and BRTP is a separate application. Planning security filters are pushed to Essbase (BSO) application but Planning is not capable push security filters to ASO application. I tried to create security filters manually to Report-ASO cube but whenever I refresh the planning application; manually created security filters are wiped out from ASO application. I was really surprised to see planning refresh process was pushing metadata changes but not security filters. User can run reports regardless of security setup and creates ad-hoc grids in smartview. This is a major security risk. Users can see each other data.

  

Objective

The purpose of this article is to demonstrate the following:-

·         How to use Planning security with ASO cube when running report using HFR

·         How to hide Essbase (ASO) application from Smart-View to use Planning security

how To

How to use Planning security with ASO cube when running report using HFR:- I really don’t consider this as solution but can be used as a workaround.  We would creat a new HFR “Database connection as Planning” to leverage planning secutity. Planing is able to recognize ASO as part of plan type and will allow you to cteate a connection. By using Planing connection ASO can leverage the same security.

  

·         How to hide Essbase (ASO) application from Smart-View: - User can see available options such as Essbase, Planning and Reports. Planning security will not be applicable if a user select Essbase connection and access Report-ASO cube. User can create ad-hoc and run the report without any security restriction.  

The only workaround is to use planning connection and hide Essbase option from Smart-View

and disable provider services for and use planning connection.

Helpful KM 

Essbase Server is Not Listed in the Drop-Down List of the Shared Connections in SmartView 11.1.2.2 (Doc ID 1568573.1)

Security Filters For ASO Planning Application (Doc ID 1625712.1