Before you can use Shared Services to manage security, you must migrate (externalize) any existing native users and groups to Shared Services.
When you first convert Essbase Server to EPM System security mode, users and groups are migrated automatically to Shared Services. Users and groups that fail migration are retained in the Essbase security file (ARBORPATH/essbase.sec). If a user’s database permissions changed during migration to Shared Services, information is written to a text file named AccessModifiedUsers_n.txt, where n represents the sequence ID for the instance of Essbase that is registered with Shared Services. (The sequence ID is incremented each time Essbase is externalized.) This file is located in the ARBORPATH/bin directory.
Essbase Administration Server users are not migrated automatically when the server is converted. If you want to migrate Essbase Administration Server users to Shared Services, you must use the Externalize Users Wizard.
Note: | The currently logged-on Essbase Administration Server user is the only user visible under the Essbase Administration Server node (under Users) in Enterprise View. However, the Externalize Users Wizard enables you to migrate all users who exist on Essbase Administration Server, even though you cannot view the users in Enterprise View. |
When you use the Externalize Users Wizard to migrate Administration Services users or to re-migrate Essbase users that previously failed migration, these migration errors are logged in the file that you specify in the wizard and in the Essbase Server log.
You must be an Essbase Administrator to migrate users for a server.
Caution! | When you migrate to Shared Services, Essbase users and groups are converted to equivalent roles in Shared Services. Shared Services creates a read-only superuser with the user ID named “admin.” If Essbase contains a user ID named “admin,” that user ID cannot be migrated to Shared Services. Before migrating, change the “admin” user ID (for example, from “admin” to “asadmin”). To edit the security file in your Essbase installation, use Administration Services Console or MaxL. |
To migrate Essbase users to Shared Services:
From Enterprise View or a custom view, under the Essbase Server node, select the Security node.
Right-click and select Externalize users.
In the Externalize Users Wizard, click Help for more information.
To migrate Essbase Administration Server users to Shared Services:
Right-click the Essbase Administration Server node and select Externalize users.
In the Externalize Users Wizard, click Help for more information.
“Migrating Essbase to EPM System Security” topic in the “User Management and Security in EPM System Security Mode” chapter in the Oracle Essbase Database Administrator's Guide
alter system (MaxL in the Oracle Essbase Technical Reference