Users Without Any Provisioned Roles In Shared Services Can Login To Workspace

Users Without Any Provisioned Roles In Shared Services Can Login To Workspace [ID 1331827.1]
		Modified 24-JUN-2011     Type HOWTO     Status PUBLISHED

In this Document
  Goal
  Solution

---

Applies to:

Hyperion BI+ - Version: 11.1.2.1.000 to 11.1.2.1.000 - Release: 11.1 to 11.1
Information in this document applies to any platform.

Goal

You have not been provisioned any roles in Shared Services, but you are still able to login to Workspace.  However, you cannot see all the menus.

Solution

In 11.1.2.1, this is by design. By default, all users are allowed to logon.  Workspace allows any user to be authenticated, but activity beyond that is regulated by provisioned roles.

For releases prior to 11.1.2.1, administrators can control non-provisioned users ability to login into workspace via a Java system property:

-DAllowNonBIPlusUsersToLogin=true|false

Prior to 11.1.2.1, an administrator would sign into the Configuration Management Console (CMC) (as described in the Workspace Administrator's Guide) and set the option under Workspace Properties > JAVA_OPTS.

In Version 11.1.2.1, follow the below steps:

1) Login to Workspace using an administrator user.
2) Go to Navigate >Administer >Workspace Server Settings.
3) Select the "Required Logon Role" drop down box and specify the proper Roles for the user.