Hyperion Shared Services – Understanding the roles available for a user or group by checking the backend tables

In this blog, I am going to be talking about the roles available for a business user in Hyperion Shared Services. This tries to cover all the access privileges that exist for a given user.

The below snapshots show the list of access that exist for a Planning application.

Observe the left hand side in the above snapshot. They highlight the available roles which are available for a given user. This information is stored in a table called as CSS_ROLE_LOCALES, which is present in the Hyperion Shared Services relational schema. The snapshot of this table is as shown below.

Observe the LOCALE column in the above snapshot. This shows English and Arabic locales and description. This is the support for localization that is provided by Hyperion so that users can interact with the system in a language that they are comfortable with.

The metadata of the above table is as shown in the below snapshot.

• Identity ID is the information that will be used to identify the role.
• Name is the name of the role.
• Description gives a brief description of the role.

I now get a list of all the entries where the LOCALE is English. The output of this query is as shown in the below snapshot.

Observe that in the above snapshot, the first column which is the IDENTITY_ID lists out the product name as well, but this is in an internal format and is not very user friendly.
I design a query to strip the unnecessary data and get just the product name. The query I use is as shown in the below snapshot. 

The output of this query is as shown in the below snapshot. 

Since the above report is just jumbled and not grouped by product, I run a query to group them by the product name. This query is as shown in the below snapshot.

The output of the above query is as shown in the below snapshot. 

The list of all the roles available sorted by the product name is as shown in the below table.

PRODUCT	NAME	DESCRIPTION
BIEE	BIDashboardsWorkspaceAppMenu	Controls access to the BI Interactive Dashboards Workspace application menu.
BIEE	BICatalogWorkspaceAppMenu	Controls access to the BI Catalog Workspace application menu.
BIEE	BIHomeWorkspaceAppMenu	Controls access to the BI Home Workspace application menu.
BPM	Essbase Studio Data Source Administrator	Data Source Administrator
BPM	Essbase Studio Metadata Administrator	Data Modelar
BPM	Essbase Studio Viewer	Viewer
BPM	Essbase Studio Administrator	Essbase Studio Server Administrator
DiscMan	Disclosure Management Administrator	Can assign ACL�s and Can use the Taxonomy Manager to register/update/etc
DiscMan	Disclosure Management User	Disclosure Management User
EAL	Repository Access	Analytics Link Repository Access
EAL	Administrator	Analytics Link Repository Administrator
EALBRIDGE	Operator	Analytics Link Bridge Operator
EALBRIDGE	Bridge Access	Bridge Access
ESB	Create/Delete Application	Essbase Analytic Services Application Creator
ESB	Administrator	Essbase Analytic Services Administrator
ESB	Server Access	Essbase Analytic Services Server Access
ESBAPP	Application Manager	Essbase Analytic Services Application Manager
ESBAPP	Database Manager	Essbase Analytic Services Database Manager
ESBAPP	Calc	Essbase Analytic Services Database Calculator
ESBAPP	Write	Essbase Analytic Services Database Writer
ESBAPP	Filter	Essbase Analytic Services Database Filter User
ESBAPP	Read	Essbase Analytic Services Database Reader
ESBAPP	Start/Stop Application	Essbase Analytic Services Start/Stop Application
FCC	Supplemental Data User	Supplemental Data User
FCC	Supplemental Data Drill Through User	Supplemental Data Drill Through User
FCC	Supplemental Data Power User	Supplemental Data Power User
FCC	Supplemental Data Administrator	Supplemental Data Administrator
FCC	Reconciliation Viewer	Reconciliation Viewer
FCC	Reconciliation Reviewer	Reconciliation Reviewer
FCC	Reconciliation Preparer	Reconciliation Preparer
FCC	Reconciliation Commentator	Reconciliation Commentator
FCC	Reconciliation Power User	Reconciliation Power User
FCC	Reconciliation Administrator	Reconciliation Administrator
FCC	Close User	Close User
FCC	Close Power User	Close Power User
FCC	Account Reconciliation Manager	Account Reconciliation Manager
FCC	Close Manager	Close Manager
FCC	Close Administrator	Close Administrator
FCC	Reconciliation Report Designer	Reconciliation Report Designer
FCC	Close Report Designer	Close Report Designer
FCC	Supplemental Data Manager	Supplemental Data Manager
FCC	Supplemental Data Report Designer	Supplemental Data Report Designer
FCC	Supplemental Data Dimension Editor	Supplemental Data Dimension Editor
FDM	Intermediate 9	Intermediate 9
FDM	Intermediate 6	Intermediate 6
FDM	Intermediate 7	Intermediate 7
FDM	Intermediate 8	Intermediate 8
FDM	Intermediate 8	Intermediate 8
FDM	Intermediate 7	Intermediate 7
FDM	Intermediate 6	Intermediate 6
FDM	Intermediate 5	Intermediate 5
FDM	Intermediate 4	Intermediate 4
FDM	Intermediate 3	Intermediate 3
FDM	Intermediate 2	Intermediate 2
FDM	HR Integration	Create and Run HR Integration
FDM	Drill Through	Drill Through
FDM	Drill Through	Drill Through
FDM	Run Integration	Run Integration
FDM	Create Integration	Create Integration
FDM	Intermediate 5	Intermediate 5
FDM	Intermediate 4	Intermediate 4
FDM	Basic Reviewer	Basic Reviewer
FDM	Basic Reviewer And Submitter	Basic Reviewer And Submitter
FDM	Intermediate 3	Intermediate 3
FDM	Intermediate 9	Intermediate 9
FDM	Administrator	Administrator
FDM	Administrator	Administrator
FDM	Intermediate 2	Intermediate 2
HAVA	Trusted Application	System role supporting credentialed client-server communication of OCE files.
HAVA	Viewer	Review content in the Workspace View module.
HAVA	Dynamic Viewer	Review, print and re-query static Interactive Reporting content.
HAVA	Content Manager	Manage all published repository content.
HAVA	Favorites Distributor	Access the Favorites Manager interface, used to distribute content.
HAVA	Personal Page Editor	Access the Personal Page interface, used to customize Personal Pages.
HAVA	Smart Form Publisher	Load custom forms for programs that prompt job runners.
HAVA	Report Designer	Create and distribute new reporting content.
HAVA	Data Editor	Write back changed Web Analysis data values to Analytic Services.
HAVA	Personal Parameter Editor	Define Point of View, Personal Variables and other Personal Parameters
HAVA	IR HTML Viewer	Access to IR documents in HTML
HAVA	IR WebClient Viewer	Access to IR document in IR WebClient
HAVA	Job Runner	Review public job parameters and run jobs using customized data.
HAVA	Personal Page Publisher	Distribute Personal Pages to other repository users.
HAVA	Job Publisher	Modify SQR Production Reporting files and output and distribute other content.
HAVA	Job Manager	Manage output directories and printer locations, and modify and distribute content.
HAVA	Scheduler	Access the Schedule module to schedule defined jobs and batches.
HAVA	Schedule Manager	Create and manage all events, calendars, public parameters, and physical resources.
HAVA	Data Source Publisher	Distribute data source connectivity files to other repository users.
HAVA	Interactive Reporting Viewer	Review and print static Interactive Reporting content.
HAVA	Reporting and Analysis Global Administrator	Universal implicit access to all resources and functionality.
HAVA	Reporting and Analysis Administrator	Access Administrate and Impact Management modules. Conditional access to all resources.
HAVA	Explorer	Access the Explore module. List and access repository content.
HAVA	Content Publisher	Create books and batches. Modify and distribute content to repository users.
HAVA	Analyst	Use full analytic and reporting functionality set.
HBR	Administrator	Administrator
HBR	Interactive User	Interactive User
HBR	Basic User	Basic User
HFM	Inter-Company Transaction Auto Match by ID	Inter-Company Transaction Auto Match by ID
HFM	Inter-Company Transaction Manual Match with Tolerance	Inter-Company Transaction Manual Match with Tolerance
HFM	Inter-Company Transaction Manual Match	Inter-Company Transaction Manual Match
HFM	Inter-Company Transaction Unmatch	Inter-Company Transaction Unmatch
HFM	Inter-Company Transaction Post/Unpost	Inter-Company Transaction Post/Unpost
HFM	Approve Journals	Approve Journals
HFM	Consolidate All with Data	Consolidate All with Data
HFM	Enable write back in Web Grid	Enable write back in Web Grid
HFM	Database Management	Database Management
HFM	Manage Ownership	Manage Ownership
HFM	Advanced User	Advanced User
HFM	Manage Custom Documents	Manage Custom Documents
HFM	Receive Email Alerts for Process Control	Receive Email Alerts for Process Control
HFM	Receive Email Alerts for Intercompany	Receive Email Alerts for Intercompany
HFM	Data Form Write Back from Excel	Data Form Write Back from Excel
HFM	Post Journals	Post Journals
HFM	Extended Analytics	Extended Analytics
HFM	Rules Administrator	Rules Administrator
HFM	Rules Designer	Rules Designer
HFM	Rules Viewer	Rules Viewer
HFM	Run EquityPickUp	Run EquityPickUp
HFM	View Task Audit	Allows non-admin users access to the HFM task audit trail screen
HFM	Manage Templates	Manage Templates
HFM	View Data Audit	Allows non-admin users access to the HFM data audit screen
HFM	Dashboard Viewer	Controls access to Oracle Financial Management Analytics Dashboard application menu
HFM	Generate Recurring	Generate Recurring
HFM	Journals Administrator	Journals Administrator
HFM	Review Supervisor	Review Supervisor
HFM	Default	Default
HFM	Application Administrator	Application Administrator
HFM	Load System	Load System
HFM	Read Journals	Read Journals
HFM	Reviewer 1	Reviewer 1
HFM	Reviewer 2	Reviewer 2
HFM	Reviewer 3	Reviewer 3
HFM	Reviewer 4	Reviewer 4
HFM	Manage Models	Manage Models
HFM	Reviewer 5	Reviewer 5
HFM	Reviewer 6	Reviewer 6
HFM	Reviewer 7	Reviewer 7
HFM	Reviewer 8	Reviewer 8
HFM	Reviewer 9	Reviewer 9
HFM	Reviewer 10	Reviewer 10
HFM	Create Journals	Create Journals
HFM	Submitter	Submitter
HFM	Lock Data	Lock Data
HFM	Unlock Data	Unlock Data
HFM	Consolidate	Consolidate
HFM	Consolidate All	Consolidate All
HFM	Run Allocation	Run Allocation
HFM	Manage Data Entry Forms	Manage Data Entry Forms
HFM	Save System Report On Server	Save System Report On Server
HFM	Reserved	Reserved
HFM	Create Unbalanced Journals	Create Unbalanced Journals
HFM	Load Excel Data	Load Excel Data
HFM	Inter-Company Transaction Admin	Inter-Company Transaction Admin
HFM	Inter-Company Transaction User	Inter-Company Transaction User
HFM	Inter-Company Transaction Match Template	Inter-Company Transaction Match Template
HFM	Inter-Company Transaction Auto Match by Account	Inter-Company Transaction Auto Match by Account
HP	Approvals Administrator	Controls the Planning Approvals process and can perform actions on planning units to which they have write access. This role comprises the Approvals Ownership Assigner, Approvals Process Designer, and Approvals Supervisor roles of Planning.
HP	Ad Hoc User	Views and modifies Smart Slices and performs ad hoc operations.
HP	Mass Allocation	Mass Allocation
HP	View User	View User
HP	Administrator	Administrator
HP	Interactive User	Interactive User
HP	Planner	Planner
HP	Copy Decision Package	Allows a user to perform copy decision package operation for decision package enabled application
HP	Ad Hoc Read Only User	Performs the tasks that an Ad Hoc User can perform in read Only mode
HP	Essbase Write Access	Essbase Write Access
HP	Task List Access Manager	Assigns tasks to other users
HP	Approvals Supervisor	For any member of the planning unit hierarchy to which they have write access, they can stop and start a planning unit and take any action on a planning unit. Users with this role can perform the preceding actions even if they do not own the planning unit. However, they cannot change any data in a planning unit unless they own it.
HP	Approvals Process Designer	Performs the tasks that can be performed with the Planner role and Approvals Ownership Assigner role, plus, for any member of the planning unit hierarchy to which they have write access, they can change the secondary dimensions and members for the Entities to which they have write access, change the scenario and version assignment for a planning unit hierarchy, edit data validation rules for data forms to which they have access.
HP	Approvals Ownership Assigner	Performs the tasks that a Planner role can perform plus, for any member of the planning unit hierarchy to which they have write access, they can assign owners, assign reviewers, and specify users to be notified.
HP	Ad Hoc Grid Creator	Performs the tasks that an Ad Hoc User can perform, plus creates and saves Smart Slices.
HPM	Administrator	Role that gives administrator privileges
HPM	View User	Role that gives View User privileges
HPM	Power User	Role that gives Power User privileges
HPM	Interactive User	Role that gives Interactive User privileges
HPS	Power Manager	Privilege for performing security administration (Administrator).
HPS	Interactive	Privilege for performing business object maintenance (Designer).
HPS	Basic	Regular or typical end-user access privilege (User).
HSF	Administrator	Administrator
HSF	Interactive User	Interactive User
HSF	Basic User	Basic User
HSF	View User	View User
HUB	Provisioning Manager	Provisioning Managers have access on applications performing provisioning
HUB	Planning Calculation Manager Administrator	Ability to create, update, delete Rules Calculation objects in any Hyperion Planning application view available in EPMA. Ability to re-define launch access rights per rules and rules set
HUB	Financial Management Calculation Manager Administrator	Ability to create, update, delete Rules Calculation objects in any Hyperion Financial Management application
HUB	Calculation Manager Administrator	Ability to create, update, delete Rules Calculation objects in any Hyperion Financial Management or Planning application view available in EPMA.  Additional ability to re-define launch access rights per the rules and rules set within any Planning application view
HUB	Profitability Application Creator	Ability to create and deploy Profitability applications within the EPMA framework
HUB	Essbase Application Creator	Can create/deploy application views in Essbase.
HUB	Planning Application Creator	Can create/deploy application views in Planning.
HUB	Financial Management Application Creator	Can create/deploy application views in Financial Management.
HUB	Administrator	Administrators have complete and unrestricted access
HUB	Run Taskflows	Have access to Run Taskflows.
HUB	EPMA Administrator	EPMA Administrators have complete and unrestricted access.
HUB	LCM Designer	Have access to perform Life Cycle Management export only.
HUB	Financial Management Manager	Can create Financial Management applications, administer Financial Management servers and applications.
HUB	Financial Management Administrator	Financial Management Administrator.
HUB	Directory Manager	Directory Managers have access to manage Users and Groups
HUB	Project Manager	Project Managers have access to projects they own
HUB	Create Integrations	Have access to create integrations.
HUB	Run Integrations	Have access to run integrations.
HUB	LCM Administrator	Have access to perform Life Cycle Management for all applications.
HUB	Dimension Editor	Ability to import/create/modify dimensions.
HUB	Manage Taskflows	Have access to Manage Taskflows.
HUB	Application Creator	Can create/deploy application views.
IOP	IOP Administrator	Have access to all IOP administration
IOP	IOP User	Can access the IOP application
TAX	Tax Supplemental Schedules Administrator	Tax Supplemental Schedules Administrator
TAX	Tax Supplemental Schedules Report Designer	Tax Supplemental Schedules Report Designer
TAX	Tax Supplemental Schedules	Tax Supplemental Schedules
TAX	Tax Supplemental Schedules Drill Through User	Tax Supplemental Schedules Drill Through User
TAX	Tax Supplemental Schedules User	Tax Supplemental Schedules User
TAX	Tax Supplemental Schedules Dimension Editor	Tax Supplemental Schedules Dimension Editor
TAX	Tax Operations	Tax Operations
TAX	Tax Operations User	Tax Operations User
TAX	Tax Operations Power User	Tax Operations Power User
TAX	Tax Operations Administrator	Tax Operations Administrator
TAX	Tax Supplemental Schedules Power User	Tax Supplemental Schedules Power User
TAX	Tax Operations Report Designer	Tax Operations Report Designer