Delete rule from cube

[Matya]

Hi All!

Could anyone tell me what rights are needed to delete rule from cube?

I would like to provide that rights the users (delete rule from only one cube), but I don't want to add these users to TM1 admin group.

Client: Architect 10.1

Thx,
Matya

[Alan Kirk]

Could anyone tell me what rights are needed to delete rule from cube?

I would like to provide that rights the users (delete rule from only one cube), but I don't want to add these users to TM1 admin group.

Client: Architect 10.1

I can't conceive of a situation where this would ever be a good administrative practice.

Nonetheless if you're determined to do it, it would be worth looking at the RuleLoadFromFile TI command. Obviously it would be possible to write a TI process to load an empty rules file, and give end users permission to run that process.

[declanr]

Matya,

It's not explicitly something I have looked into since I would never allow a user to change rules or processes in one area unless they were a fully trained up Administrator/Developer that understood the possible consequences... however since you have asked the question you obviously have a specific reason to do so.

If a user is not an Administrator and/or doesn't have the correct licence file on their PC you would get a "Rule Creation Failed" error... again there may be exceptions to this or I may just plain be wrong as I have never had desire to get an end user to try it out.

What you could do is create a text file that has your whole rule sheet for the cube in it and give said users access to that text file with the ability for them to change it.

Then create a TI process with a

Code: Select all

CubeRuleDestroy ( 'CubeName' );

at the start and then a

Code: Select all

RuleLoadFromFile('CubeName','TextFile');

at the end.
Set the TI to run with "securityaccess" aka right click on it in architect and tick "Security Access"
Give the relevant users access to Run the TI
and job done...

I added the ellipses at the end there as I don't really have any idea if this would work well, it's just off the top of my head. Of course with anything like this your primary objective would be to make sure that the Users are fully trained up and able to create/change rules.


Another possible avenue would be to give them "Data Admin" access levels.


Edit - Alan beat me to it but I'd written it out so you get my response whether you want it or not!

[Harvey]

I'm with Alan, this is probably a very bad idea!

If you must take this path, here is an alternative to writing a TI process.

Create a new group, add the user to that group, then right click on the "Cubes" node, select "Security Assignments" and give the new group Admin rights to the cube.

This will not enable the user to delete the rule entirely, but they will be able to delete the text inside the rule and save it, which is essentially that same effect.

Note though that they will have admin access to the cube, which gives them other abilities!

[Matya]

Thanks for your answers!

I'll try to explain the whole problem:
We have a tm1 data server and a few users who would like to use a cube in Cognos Insight. They would like to add calculation element to the cube (for example). I gave admin rights to these users (admin right for the cube and all dimensions of the cube), so they can add a calc, but they cannot delete the added element in Cognos Insight(error: NO_ADMIN_RIGHTS). I "examined" this story at Architect: They can add/delete element to/from the dimensions and they can create and modify the cube rule too, but they cannot delete the rule. That's why I think the solution would be: They can delete rule.

[Matya]

So, could anyone tell me what rights are needed to delete rule from cube?

[Harvey]

So, could anyone tell me what rights are needed to delete rule from cube?

Since it's considered dubious practice to give users the ability to write and delete rules, most of us on this forum have never tested the scenarios.

I did some brief checking in response to this question and it looked to me like a user must be in the admin group to delete the rule file -- but it's also possible one of the lesser built-in groups might work too, as I didn't test them all.

The best way to be sure would be to try it out on a test server; it should be easy enough to find out.

[Matya]

Lazarus, Thx for the answers!

[jim wood]

Matya,

Due to the size of the cube we are working with at the moment we remove the rules before completing loads and ad them back in once finished. We use a method similar to the one Declan suggested. As far as I am aware this is the only way round the this without giving the user admin access,

Jim.

[stephen waters]

So, could anyone tell me what rights are needed to delete rule from cube?

Leaving aside the technical aspects , if you are using Enterprise TM1 (or legacy) licensing I think you will need a Modeller\Administrator license to carry this out.