Hello,
I am trying to setup CAFE for end users. Now, what I found during this process is; a user should be part of ADMIN group to be able to access cubes/views on that TM1 instance via CAFE. Is my understanding correct? Initially, I had users assigned to some user groups (not ADMIN), which resulted in no access to TM1 instance fr those users.
Some details about setup for your reference:
I am using integrated security mode 5 for this instance.
Cognos BI groups are setup correctly
Users are even appearing in respective groups in }ClientGroups cube as expected after their first login
Can someone confirm this? and is there any workaround for this? As, I surely don't want to give ADMIN access to end users
If any other details needed from my side, please let me know.
Thanks a lot for your expert comments and time. Ciao.
Best Regards,
Ravi
CAFE - User Authentication - ALWAYS need to be ADMIN??
-
- Posts: 20
- Joined: Tue Feb 05, 2013 2:58 am
- OLAP Product: Cognos TM1
- Version: 10.2.2
- Excel Version: 2010
-
- Community Contributor
- Posts: 219
- Joined: Mon Jul 23, 2012 8:31 am
- OLAP Product: TM1
- Version: 10.2.2
- Excel Version: 2010
Re: CAFE - User Authentication - ALWAYS need to be ADMIN??
Just confirming that users are able to connect to Perspectives or Architect without issues?
None of our CAFE Test/UAT users required Admin.
Are they able to login with User Name & Password if you change to Security Mode 1?
None of our CAFE Test/UAT users required Admin.
Are they able to login with User Name & Password if you change to Security Mode 1?
-
- Posts: 20
- Joined: Tue Feb 05, 2013 2:58 am
- OLAP Product: Cognos TM1
- Version: 10.2.2
- Excel Version: 2010
Re: CAFE - User Authentication - ALWAYS need to be ADMIN??
Hi RJ, Thanks for sharing your understanding and findings.
As per your suggestion, following:
1) Access works fine in Architect/perspective
2) I also did a test with a test user id, with some groups assigned (not ADMIN), and it works fine and objects are accessible for this user via CAFE (which is aligned with what you said)
I think, I will have to dig deeper into the connection between Cognos BI and AD. As in, why this is not working as expected for a non admin user when security mode = 5 is used. I will update this when I find the root cause.
Best Regards,
Ravi
As per your suggestion, following:
1) Access works fine in Architect/perspective
2) I also did a test with a test user id, with some groups assigned (not ADMIN), and it works fine and objects are accessible for this user via CAFE (which is aligned with what you said)
I think, I will have to dig deeper into the connection between Cognos BI and AD. As in, why this is not working as expected for a non admin user when security mode = 5 is used. I will update this when I find the root cause.
Best Regards,
Ravi
-
- Posts: 17
- Joined: Tue Mar 01, 2016 5:55 am
- OLAP Product: TM1 + BI
- Version: TM1 10.2
- Excel Version: Excel 2010
Re: CAFE - User Authentication - ALWAYS need to be ADMIN??
Hi,
I confirm as well that CAFE works with CAM security and you do not need to have Admin right to see a cube in CAFE.
CAFE is using the TM1 web URL to connect to the cubes, I would recommend you to check if TM1 web is set up correctly.
Configuring Perspective to work with CAM Authentication is quite simple but Configuring TM1 Web requires more steps
Cheers,
I confirm as well that CAFE works with CAM security and you do not need to have Admin right to see a cube in CAFE.
CAFE is using the TM1 web URL to connect to the cubes, I would recommend you to check if TM1 web is set up correctly.
Configuring Perspective to work with CAM Authentication is quite simple but Configuring TM1 Web requires more steps
Cheers,
-
- Posts: 66
- Joined: Wed Jul 16, 2014 9:20 am
- OLAP Product: All of them
- Version: All of them
- Excel Version: 2003 -2013
Re: CAFE - User Authentication - ALWAYS need to be ADMIN??
CAFE uses the PMhub, not TM1 Web
Use http://{yourservername}:<portnumber>/pmhub/pm/tm1/servers to see if everything is set up properly.
If it is, then you will see something like this
Use http://{yourservername}:<portnumber>/pmhub/pm/tm1/servers to see if everything is set up properly.
If it is, then you will see something like this
Code: Select all
{"servers":[{"class":"server","rel":"child","id":"Planning Sample","name":"Planning Sample","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/server%28Planning+Sample%29"}{"class":"server","rel":"child","id":"SData","name":"SData","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/server%28SData%29"}],"self":{"class":"servers","rel":"self","name":"servers","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/servers"}}