Forum Discussion

VishalPai's avatar
VishalPai
Contributor
3 years ago

Security Comparision (Users/Groups) and Synch Up across Environments/Applications

OSAdmin

If we have multiple OneStream Environments, is there any Market Place solution or a way we can compare Security (Users/Groups) between environments and then Synch up only those changes that are required to be migrated.

Note: - We are aware of .xml extract and load, but a utility to perform the same would help and avoid any error related to security

  • What is available at the moment in Marketplace, related to that sort of scenario:

    • Security Audit Reports will produce business-friendly reports about security assignments.
    • Application Control Manager allows organizations to formalize the process of security management, tracking add/update/delete requests for users and groups and processing them through an approval chain.
    • User Management Console allows admins to create users and groups directly in Azure Active Directory, copying assignments from pre-existing ones.
    • Provision Request Manager allows Onestream apps to pull provisioning requests from an external db table, which can be then be managed with external tools to queue up requests.
    • XML Security Remover strips security from application files. It works with the Load/Extract pattern you mentioned, I included it here only as something you could maybe "borrow" some code from.

    The process you describe sounds like something that maybe could be filed as a request in the IdeaStream section dedicated to Marketplace, feel free to do it there: https://community.onestreamsoftware.com/t5/MarketPlace/idb-p/MarketPlaceCoreIdeas

    There are some utilities that consultants built over the years, "floating" around. The closest I've seen is one that allowed you to export security groups as csv and reimport them in the same format, replacing everything that was there before; it was meant for development, sounds a bit too dangerous to use in production settings.

  • JackLacava's avatar
    JackLacava
    Honored Contributor

    What is available at the moment in Marketplace, related to that sort of scenario:

    • Security Audit Reports will produce business-friendly reports about security assignments.
    • Application Control Manager allows organizations to formalize the process of security management, tracking add/update/delete requests for users and groups and processing them through an approval chain.
    • User Management Console allows admins to create users and groups directly in Azure Active Directory, copying assignments from pre-existing ones.
    • Provision Request Manager allows Onestream apps to pull provisioning requests from an external db table, which can be then be managed with external tools to queue up requests.
    • XML Security Remover strips security from application files. It works with the Load/Extract pattern you mentioned, I included it here only as something you could maybe "borrow" some code from.

    The process you describe sounds like something that maybe could be filed as a request in the IdeaStream section dedicated to Marketplace, feel free to do it there: https://community.onestreamsoftware.com/t5/MarketPlace/idb-p/MarketPlaceCoreIdeas

    There are some utilities that consultants built over the years, "floating" around. The closest I've seen is one that allowed you to export security groups as csv and reimport them in the same format, replacing everything that was there before; it was meant for development, sounds a bit too dangerous to use in production settings.

    • VishalPai's avatar
      VishalPai
      Contributor

      Thanks JackLacava , will raise this request in IdeaStream hope OneStream Developers will check and provide us the required help