CAFE - User Authentication - ALWAYS need to be ADMIN??

Post Reply
rksharmatm1
Posts: 20
Joined: Tue Feb 05, 2013 2:58 am
OLAP Product: Cognos TM1
Version: 10.2.2
Excel Version: 2010

CAFE - User Authentication - ALWAYS need to be ADMIN??

Post by rksharmatm1 »

Hello,

I am trying to setup CAFE for end users. Now, what I found during this process is; a user should be part of ADMIN group to be able to access cubes/views on that TM1 instance via CAFE. Is my understanding correct? Initially, I had users assigned to some user groups (not ADMIN), which resulted in no access to TM1 instance fr those users.

Some details about setup for your reference:
I am using integrated security mode 5 for this instance.
Cognos BI groups are setup correctly
Users are even appearing in respective groups in }ClientGroups cube as expected after their first login

Can someone confirm this? and is there any workaround for this? As, I surely don't want to give ADMIN access to end users :)
If any other details needed from my side, please let me know.

Thanks a lot for your expert comments and time. Ciao.

Best Regards,
Ravi
RJ!
Community Contributor
Posts: 219
Joined: Mon Jul 23, 2012 8:31 am
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2010

Re: CAFE - User Authentication - ALWAYS need to be ADMIN??

Post by RJ! »

Just confirming that users are able to connect to Perspectives or Architect without issues?

None of our CAFE Test/UAT users required Admin.

Are they able to login with User Name & Password if you change to Security Mode 1?
rksharmatm1
Posts: 20
Joined: Tue Feb 05, 2013 2:58 am
OLAP Product: Cognos TM1
Version: 10.2.2
Excel Version: 2010

Re: CAFE - User Authentication - ALWAYS need to be ADMIN??

Post by rksharmatm1 »

Hi RJ, Thanks for sharing your understanding and findings.

As per your suggestion, following:
1) Access works fine in Architect/perspective
2) I also did a test with a test user id, with some groups assigned (not ADMIN), and it works fine and objects are accessible for this user via CAFE (which is aligned with what you said)

I think, I will have to dig deeper into the connection between Cognos BI and AD. As in, why this is not working as expected for a non admin user when security mode = 5 is used. I will update this when I find the root cause.

Best Regards,
Ravi
ByronB
Posts: 17
Joined: Tue Mar 01, 2016 5:55 am
OLAP Product: TM1 + BI
Version: TM1 10.2
Excel Version: Excel 2010

Re: CAFE - User Authentication - ALWAYS need to be ADMIN??

Post by ByronB »

Hi,

I confirm as well that CAFE works with CAM security and you do not need to have Admin right to see a cube in CAFE.

CAFE is using the TM1 web URL to connect to the cubes, I would recommend you to check if TM1 web is set up correctly.

Configuring Perspective to work with CAM Authentication is quite simple but Configuring TM1 Web requires more steps

Cheers,
dsproffitt
Posts: 66
Joined: Wed Jul 16, 2014 9:20 am
OLAP Product: All of them
Version: All of them
Excel Version: 2003 -2013

Re: CAFE - User Authentication - ALWAYS need to be ADMIN??

Post by dsproffitt »

CAFE uses the PMhub, not TM1 Web

Use http://{yourservername}:<portnumber>/pmhub/pm/tm1/servers to see if everything is set up properly.
If it is, then you will see something like this

Code: Select all

{"servers":[{"class":"server","rel":"child","id":"Planning Sample","name":"Planning Sample","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/server%28Planning+Sample%29"}{"class":"server","rel":"child","id":"SData","name":"SData","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/server%28SData%29"}],"self":{"class":"servers","rel":"self","name":"servers","href":"http://{yourservername}:<portnumber>/pmhub/pm/tm1/servers"}}
Post Reply