Help with process to update security

[mmckimson]

I hate asking newbie questions, and apologize in advance, but I'm really under the gun trying to get a model implemented! I am trying to build a process to update the security for a dimension via a process that uses a SQL query that of course shows the following data:

Dimension_Item Group Security
Customer 1 Group 1 WRITE
Customer 2 Group 1 WRITE
Customer 3 Group 2 WRITE

I would also like to be able to update the security for the parents of the customer hierarchy. The customer hierarchy looks like this:

• Total Customers
  .Business Unit 1
  ...Unit 1
  .....Customer 1
  .....Customer 2
  ...Unit 2
  .....Customer 3
  .....Customer 4
  .Business Unit 2

For the moment, I have separate the N: level elements into one process and the C: level process in the other.

When the N: Level process runs, it seemingly runs successfully, but the data in the control cube is unchanged. Naturally, when I attempt to run the C: level process, it fails and tells me the element is a consolidated item. Looking at the element security cube, I see consolidated items with security so clearly it's possible to update it.

Hence, two questions:

1. If the process runs successfully (as for the N: level elements) but data isn't changing how do I fix it? There is probably a log somewhere, but I don't know where to find it.
2. With respect to the C:level process, what to I need to do?

Any help would be appreciated greatly!
Mike

[David Usherwood]

a You might need to run SecurityRefresh to make the changes take effect
b The }ElementSecurity_Customers cube will have a string element at the end, so can be updated at C level. Maybe writing to the cube rather than using the TI security keywords might work instead
c Please don't apologise for posting a clear, well documented 'newbie' question - this isn't a forum for experts to look down on 'beginners' (despite the occasional exasperation you may have seen). Keep posting - you set a good example

[mmckimson]

A couple of things are presenting problems, so any help would be appreciated. Here are the facts:

1. I believe authentication has been tied to the IBM Cognos (IntegratedSecurityMode = 5). This is being confirmed.
2. Using a different process, we imported groups into TM1 that we wanted to use (these are TM1 groups, and not groups from Cognos Connection). This was successful.
2. I ran a process to first delete security by customer / group and that seemingly worked.
3. When I ran the process changing the value to write, nothing happened.
4. When I open the }elementSecuritydimCustomer cube and attempted to enter a value to a group / customer intersection (WRITE for example) manually, while it would accept the value, when I exited the cube, did a SecurityRefresh and reopened the cube, the value entered wasn't there.

I'm a little confused, as if the security mode is set to 5, it's my understanding that TM1 can work with either valid groups in the IBM Cognos namespace or TM1 created groups. Any assistance anyone can provide would be appreciated.

Mike

[tomok]

Do you have any rules associated with the }ElementSecuritydimCustomer cube ?

[mmckimson]

No rules. I just reran the process and noticed something odd. As I suggested before the hierarchy looks like this

Total
>>Business Unit 1
>>>>Cost Center 1
>>>>>>Customer 1
...

When I ran the process, it wrote WRITE to all of the the customer / cost center combinations for the first cost center and then stopped. The error log suggested that the first customer for the next cost center was a consolidated item, which isn't true.

Any thoughts?
Mike

[tomok]

Without your code, or at least screen shots of each tab in the TI, I don't think anyone is going to be able to help you. The information you are giving is either not correct and/or not complete because what you are saying makes no sense.

[mmckimson]

Without your code, or at least screen shots of each tab in the TI, I don't think anyone is going to be able to help you. The information you are giving is either not correct and/or not complete because what you are saying makes no sense.

You're absolutely right, it doesn't make sense. But it is what's happening. We are going to stop the server, delete all of the element security cubes and start over with our security set up.

[tomok]

What doesn't make sense are your facts. That's why I suggested you post details so someone can help you figure out what you've done wrong.