CX 9.5 & TM1 9.5.1 - New Groups with wrong access

[Ganos Lal]

Hello World

We got a problem, that we can reproduce in the productive system with CX9.5 and another system with TM1 9.5.1.
If we create a new user group and set the rights for it, the group seems to work wrong.

Scenarios we tested:
We created new user and new group. This group we gave rights to read just 1 cube.
A: We put the new user into the new group, he can't see anything.
B: We put the new user into an existing group, everything is fine. He got rights of that group.
C: We put an existing user into the new group and delete him from the old group, nothing changes, the user still have his old rights.
That all still doesn't work correct after "Security Refresh".

BUT, this only happen for the Excel client and third party frontend tools. In Architect seems everything ok. He can see the cube and read the data.
After Database restart the new group works fine. Because database should be available 24h but a restart took about 2h, this can't be a solution.

Does anyone else have or know this problem and solved that?
What can we try to have new groups do their job direct from their creation.

If any further information are neede, feel free to ask.

Regards
Jani

[lotsaram]

Possibly you have exceeded the GroupsCreationLimit parameter (by default a miserly 20 if not explicitly set in tm1s.cfg) then the group is created as a member of the groups dimension but is not added to the security model. This would explain why a security refresh does not help but a server restart does. (However can't explain why symptoms would be different in different UIs, should be the same in all.)

[Ganos Lal]

I added GroupsCreationLimit=100 to cfg and it seems it works in the test system. We updated cfg for productive system to confirm it. Tank you very much.

Is it possible, that the GroupsCreationLimit parameters works otherwise then descripted in Operations Guide.
What i understand:
You can create 20 groups, then you need to restart db to create another 20 groups.

In our system we actually have about 60 user groups.
But we had this problem with any group. => Start db, create 1 group, the group doesn't work, restart the db, the group works, create 1 other new group, that group also doesn't work, db restart...
That doesn't met my understanding of GroupsCreationLimit.

Regards
Jani

[Ganos Lal]

Hi

It looks like it worked just once directly after database reboot.
Now, after weekend it's not working again, so setting GroupsCreationLimit hasn't helped. We are now trying to update to CX10.1 to see if the problem depends on version 9.5 or is it an error in database model.
I'll hold you up to date.

Jani

[Ganos Lal]

Hi

Update on CX10.1 hasn't helped. So it looks like the error appears because of the database model. But we can't explain ourselves, why.
Any ideas?

Jani