Forum Discussion

RamuV's avatar
RamuV
New Contributor III
4 years ago

Provision Request Manager - Access Issue

Hi All,

PRM is used to assign access to the users (adding, removing, adding to groups etc)

However, we need a different team to handle the security provision without having access to any other components in OneStream.

It seems challenging to provide such group/user who can assign access without having Admin role.

Does 6.6 version fix this with the Security updates available in 6.6 or the Provision manager again needs to have the Admin role?

Or are there any APIs we can use to modify the users based on requests.

Security

3 Replies

  • DK_OS's avatar
    DK_OS
    New Contributor
    2 hours ago

    Hi RamuV/ Charris.
    i too tried the BRAPI for access provsisioning. for ADD USER, UPDATE USER (add or remove groups), REVOKE USER.

    all are working fine, but in the DASHBOARD -->NAVIGATION CENTER--> SECURITY AUDIT REPORTS --> USER CHANGE AUDIT.

    i cannot see the change line appearing in this report, executed by task scheduled for the DM (run by Business Rule.).

    is there a way to enable the time in this report. apart from this i see the audit data and time in TOTAL USERS, USER LIST reports.

  • charris's avatar
    charris
    Icon for OneStream Employee rankOneStream Employee
    4 years ago

    Ramu,

    This is exactly what the "Manage System Security" role is for in 6.6. There is also a BRApi for security management, you can use to do all kinds of things, I've seen them in BRs attached to DM jobs that were started from REST API calls sent from an IT owned system for user management, you could also use a service account to add the DM to a task scheduler job and have it pull updates in from some external source.

    • RamuV's avatar
      RamuV
      New Contributor III
      4 years ago

      Thank you for the reply, Charris!

      I got the 6.6 installed now so will have a look into it and keep the community informed on how it goes.