Forum Discussion

Clarke_Hair's avatar
Clarke_Hair
Contributor
2 months ago

Local User Access when SSO turned on or need to set WF for local user when you can't access user.

in our initial design we have a local Admin user - OS_Admin that runs all our DM and Scheduler jobs. This was a local Admin user that pwd never changed (IT requires all AD users to change pwd's and we have too many embedded scripts with pwd for this to work).  When we migrated to V8 and the new SSO security structure was applied, we found that keeping the option for manual user sign-in created more issues for our SSO users than we could justify so we have stopped being able to sign in as this user.

Issue:  We have logic that is pointing to the Global and this user's settings that drive most of our activity.  In the short-term I have changed the User based settings to point to my user but I need to get away from that.

Need: I need to be able to sign-in as the local user to set the POV for WF (Scenario, Time, WF) OR is there a way I can change that from my Admin user.  Don't care either way, just need the result to be that the OS_Admin user's POV is updated. 

Security
User Interface

3 Replies

  • RobbSalzmann's avatar
    RobbSalzmann
    Valued Contributor II
    2 months ago

    If the requirement is to store a set of values, Time, Scenario, and Workflow for other processes, this is the use case for Literal Parameters.
    Create three Literal Parameters to hold these values
    prm_OS_Admin_POV_Scenario
    prm_OS_Admin_POV_Time
    prm_OS_Admin_POV_Workflow

    Now you can access these values from any business rule, assembly, or UI object without the need for a dedicated machine account to store a POV. 

  • Clarke_Hair's avatar
    Clarke_Hair
    Contributor
    2 months ago

    pre-V8 the user's name could be retained so they did not have to enter it again each time they signed in.  Once we went to V8 there was a security change that now required users to enter their name each time they tried to sign in.  It was to burdensome for our users to keep both SSO and Native sign-in available so we turned off Native sign-in.  Now users are not required to enter anything when signing in.

    Just need to update OS_Admin's POV so downstream logic can grab the correct Time, Scenario & WF.  These values are used in other processes.

    My assumption is I can't sign-in since we have turned Native off so looking for a programmatic way to update this information.

  • TGG_Alex's avatar
    TGG_Alex
    Contributor
    2 months ago

    Hi @Clarke,

    To clarify, your OneStream application has logic that leverages the POV of a native user account called OS_Admin (e.g., Workflow POV and Cube POV) alongside the set Global POV?

    Are you looking for a way to programmatically change the POV of the OS_Admin user's POV?  What issues were created after upgrade to OSS PV800+ for this user?

    We have built logic that can change this but need to better understand your requirements before being able to determine if it can help your situation.

     

    Cheers,

    A.