Performance Monitor - User Rights

[zermatt]

Hi,

We use TM1 Version 9.4.1 FP3 and we have now noticed that a "normal" user without any Admin-user-rights is able to start "Performance Monitor" by right-clicking on the TM1 Server icon in the Server Explorer. Does anybody know whether there is a possibility in disabling "normal" users from the right to start the Performance Monitor?

Many thanks for your input already in advance

[Alan Kirk]

Hi,

We use TM1 Version 9.4.1 FP3 and we have now noticed that a "normal" user without any Admin-user-rights is able to start "Performance Monitor" by right-clicking on the TM1 Server icon in the Server Explorer. Does anybody know whether there is a possibility in disabling "normal" users from the right to start the Performance Monitor?

Many thanks for your input already in advance

Does this user have Perspectives or just plain Client? I don't have access to a Client session at the moment to check (and can't be bothered stripping out my Perspectives licence file) but I wouldn't be surprised if the option wasn't there in a Client session.

[lotsaram]

I believe you have found what folks in the software biz refer to as a bug! I don't know why no one else has stumbled upon this before (or if they have it hasn't been well publicised) but this quite a bad bug.

It seems quite contradictory that as of 9.4 only admin users can export data from a cube but any old user can start performance monitor

I just tested this on my laptop running 9.5.1 and the bug is still there. I can also confirm Alan's suspicion that if running in Client mode not Perspectives (remove the tm1p.lic file) then the option is not there. However this is a bit of a moot point since the perspectives license file is now installed by default and has been for quite a few versions.

[zermatt]

Many thanks Alan and lotsaram for your replies and your time. I appreciated that a lot, in spite it seem to be a bug and not much can be done. Have a nice weekend!

[Steve Vincent]

depending on your IT security infrastructure you can do something about the fact the license is installed by default. We have 2 Windows security groups, one for client one for admin. The only difference between them is the client group has no access to the perspectives license. those groups are added as part of the installation so every install on every machine is identical, but depending on who logs on they may have just a client session or perspectives one.

obviously doesn't get around the bug about being able to start the PM as a client, but to be honest most of our users have enough trouble understanding how to change their password so i don't see it ever being changed by some inquisitive user