Tuesday, June 18, 2013

Deprovision users using LCM


If we come across a situation where we have to deprovision users in Hyperion Shared Services, we can use the LCM tool to do so. If it is a matter of deprovisioning only one or two users, we can do it manually, however, if it has to do with a lot of users, the LCM deprovisioning comes in pretty handy. It works the same as regular LCM, however, with the DELETE option while importing provisioning.
Here is a step-by-step guide to deprovision users in a planning application in bulk.

In source EPM environment, log on to Shared Services.

Perform an LCM export >
Application Management
                Foundation
                           Shared Services
                                    Native Directory > Assigned Roles > Planning > Application (check this)




Execute Migration to a File System. Name it “SAMPLE” (just an example)













The Migration Wizard box (as shown below) has several steps such as Source, Source Option, Destination Option, Summary, etc. Fill them out as per requirement.

The execution of Migration exports the migration file to the Import-Export folder. If you navigate in to the Import-Export folder, you can see a folder which looks something like "USER@NATIVEDIRECTORY" or "USER@ACTIVE_DIRECTORY_NAME," etc. The export folder is created under the "user" who performed the migration. Same holds true in target environment.

We can view "Migration Status Report" under "Administration" in the menu bar in order to check the status of migration.

Open the file that is created after the export process. I prefer MS Excel for this.

Modify the file such that you will have only rows containing the users that you want deprovisioned. It means you need to delete the rows that contain the users/groups that you still would like to be provisioned after the process.

Save the file.

Move the file to the Import-Export folder in the target server, ie., where you have Shared Services installed. The path is usually "\oracle\Middleware\user_projects\epmsystem1\import_export" however, you may have different path as per your organization policies or whoever installed EPM in your organization.


Log on to Shared Services in target environment.



Perform LCM import from the File System by choosing “SAMPLE” from under File System in Shared Services. 
SAMPLE is created after the LCM export that you have performed earlier. If you do not see it, click “REFRESH” just below “File” on the top left corner of the screen/HSS menu.
On the right, expand “Native Directory” till you get to the application name. Check.
Click “Define Migration” and keep going.
On the “Migration Wizard” window, under “Destination Options” you will see “Import Operation Type” followed by a drop down. Choose “Delete” and click NEXT.
Execute Migration.

Log on to Planning, and refresh security filters.
The users you wanted deprovisioned should be gone by now.



No comments: