Disable Change of Rules

Post Reply
Mark2007
Posts: 45
Joined: Tue Jan 07, 2014 12:07 pm
OLAP Product: Cognos TM1
Version: PA 2
Excel Version: office 365

Disable Change of Rules

Post by Mark2007 »

Hi there,
in my model, special users have ADMIN-rights to cubes, because they need to be able to save public views.
It works wonderful.
the disadvantage: these users are also able to access and change the cube-rule.
is it possible, to disable the right to change the rule?

Thanks in Advange!

Mark
User avatar
Elessar
Community Contributor
Posts: 331
Joined: Mon Nov 21, 2011 12:33 pm
OLAP Product: PA 2
Version: 2.0.9
Excel Version: 2016
Contact:

Re: Disable Change of Rules

Post by Elessar »

Considering the cost of administrator license, this sounds expensive!

"SecurityAdmin" group is what you need: they can save public views and cannot change rules/processes
Best regards, Alexander Dvoynev

TM1 and Data Science blog: 6th article - PAfE + VBA: Commit each cell without pressing “Commit” button.
Mark2007
Posts: 45
Joined: Tue Jan 07, 2014 12:07 pm
OLAP Product: Cognos TM1
Version: PA 2
Excel Version: office 365

Re: Disable Change of Rules

Post by Mark2007 »

Good Idea, Thanks!

I'll have a look at it, as additionally, the users need to change Cube-Data, too, but I think, I con do this bei additional groups with "Write" lincence to the needed cubes.
User avatar
gtonkin
MVP
Posts: 1192
Joined: Thu May 06, 2010 3:03 pm
OLAP Product: TM1
Version: Latest and greatest
Excel Version: Office 365 64-bit
Location: JHB, South Africa
Contact:

Re: Disable Change of Rules

Post by gtonkin »

Could you get them to save the view as private and give them access to a TI to PublishView?
Mark2007
Posts: 45
Joined: Tue Jan 07, 2014 12:07 pm
OLAP Product: Cognos TM1
Version: PA 2
Excel Version: office 365

Re: Disable Change of Rules

Post by Mark2007 »

Sorry, does not work,

someone who is Security-Admin can spend himself ADMIN-rights to cubes, so he can change rules again, can't he?
tomok
MVP
Posts: 2831
Joined: Tue Feb 16, 2010 2:39 pm
OLAP Product: TM1, Palo
Version: Beginning of time thru 10.2
Excel Version: 2003-2007-2010-2013
Location: Atlanta, GA
Contact:

Re: Disable Change of Rules

Post by tomok »

gtonkin wrote: Fri Jan 15, 2021 3:38 pm Could you get them to save the view as private and give them access to a TI to PublishView?
IMO, this is the answer. We do this for a select group of users that we don't want to make admins but they are responsible for creating reports and views for others in their departments. Works fine.
Tom O'Kelley - Manager Finance Systems
American Tower
http://www.onlinecourtreservations.com/
User avatar
Steve Rowe
Site Admin
Posts: 2410
Joined: Wed May 14, 2008 4:25 pm
OLAP Product: TM1
Version: TM1 v6,v7,v8,v9,v10,v11+PAW
Excel Version: Nearly all of them

Re: Disable Change of Rules

Post by Steve Rowe »

If you are seeing that someone who is security admin is able to elevate themselves to admin then something is wrong.

My understanding of what security admin is for is to allow the administration of users and security groups to a central IT function without them being able to see the data and or make changes to the application.

We don't really use the feature but if security admin allows you to save a view (and therefore see data) or elevate your own rights then it's not behaving itself or at least its function has changed alot.

But as others have said, it's fairly simple to write a TI to do this and then give a standard user the ability to publish their provate views.
Technical Director
www.infocat.co.uk
User avatar
Elessar
Community Contributor
Posts: 331
Joined: Mon Nov 21, 2011 12:33 pm
OLAP Product: PA 2
Version: 2.0.9
Excel Version: 2016
Contact:

Re: Disable Change of Rules

Post by Elessar »

Mark2007 wrote: Fri Jan 15, 2021 3:39 pm someone who is Security-Admin can spend himself ADMIN-rights to cubes, so he can change rules again, can't he?
Just for info: no, they cannot. Only Admin can grant ADMIN access.
I agree with gtonkin, a TI with "PublishView" is the best idea
Best regards, Alexander Dvoynev

TM1 and Data Science blog: 6th article - PAfE + VBA: Commit each cell without pressing “Commit” button.
Mark2007
Posts: 45
Joined: Tue Jan 07, 2014 12:07 pm
OLAP Product: Cognos TM1
Version: PA 2
Excel Version: office 365

Re: Disable Change of Rules

Post by Mark2007 »

tomok wrote: Fri Jan 15, 2021 6:21 pm
gtonkin wrote: Fri Jan 15, 2021 3:38 pm Could you get them to save the view as private and give them access to a TI to PublishView?
IMO, this is the answer. We do this for a select group of users that we don't want to make admins but they are responsible for creating reports and views for others in their departments. Works fine.
Thanks to all for the discussion! I'll do it via the process. Thanks!

Regards
Mark
Bakkone
Posts: 119
Joined: Mon Oct 27, 2014 10:50 am
OLAP Product: TM1
Version: 10.2.2
Excel Version: 2013

Re: Disable Change of Rules

Post by Bakkone »

Elessar wrote: Fri Jan 15, 2021 2:48 pm Considering the cost of administrator license, this sounds expensive!
IBM and its partners have been quite aggressive to push their "advanced" license model where all users can be admins and no PVU-limits.
Post Reply