Disable Change of Rules
-
- Posts: 45
- Joined: Tue Jan 07, 2014 12:07 pm
- OLAP Product: Cognos TM1
- Version: PA 2
- Excel Version: office 365
Disable Change of Rules
Hi there,
in my model, special users have ADMIN-rights to cubes, because they need to be able to save public views.
It works wonderful.
the disadvantage: these users are also able to access and change the cube-rule.
is it possible, to disable the right to change the rule?
Thanks in Advange!
Mark
in my model, special users have ADMIN-rights to cubes, because they need to be able to save public views.
It works wonderful.
the disadvantage: these users are also able to access and change the cube-rule.
is it possible, to disable the right to change the rule?
Thanks in Advange!
Mark
- Elessar
- Community Contributor
- Posts: 358
- Joined: Mon Nov 21, 2011 12:33 pm
- OLAP Product: PA 2
- Version: 2.0.9
- Excel Version: 2016
- Contact:
Re: Disable Change of Rules
Considering the cost of administrator license, this sounds expensive!
"SecurityAdmin" group is what you need: they can save public views and cannot change rules/processes
"SecurityAdmin" group is what you need: they can save public views and cannot change rules/processes
-
- Posts: 45
- Joined: Tue Jan 07, 2014 12:07 pm
- OLAP Product: Cognos TM1
- Version: PA 2
- Excel Version: office 365
Re: Disable Change of Rules
Good Idea, Thanks!
I'll have a look at it, as additionally, the users need to change Cube-Data, too, but I think, I con do this bei additional groups with "Write" lincence to the needed cubes.
I'll have a look at it, as additionally, the users need to change Cube-Data, too, but I think, I con do this bei additional groups with "Write" lincence to the needed cubes.
- gtonkin
- MVP
- Posts: 1212
- Joined: Thu May 06, 2010 3:03 pm
- OLAP Product: TM1
- Version: Latest and greatest
- Excel Version: Office 365 64-bit
- Location: JHB, South Africa
- Contact:
Re: Disable Change of Rules
Could you get them to save the view as private and give them access to a TI to PublishView?
-
- Posts: 45
- Joined: Tue Jan 07, 2014 12:07 pm
- OLAP Product: Cognos TM1
- Version: PA 2
- Excel Version: office 365
Re: Disable Change of Rules
Sorry, does not work,
someone who is Security-Admin can spend himself ADMIN-rights to cubes, so he can change rules again, can't he?
someone who is Security-Admin can spend himself ADMIN-rights to cubes, so he can change rules again, can't he?
-
- MVP
- Posts: 2832
- Joined: Tue Feb 16, 2010 2:39 pm
- OLAP Product: TM1, Palo
- Version: Beginning of time thru 10.2
- Excel Version: 2003-2007-2010-2013
- Location: Atlanta, GA
- Contact:
Re: Disable Change of Rules
IMO, this is the answer. We do this for a select group of users that we don't want to make admins but they are responsible for creating reports and views for others in their departments. Works fine.
- Steve Rowe
- Site Admin
- Posts: 2424
- Joined: Wed May 14, 2008 4:25 pm
- OLAP Product: TM1
- Version: TM1 v6,v7,v8,v9,v10,v11+PAW
- Excel Version: Nearly all of them
Re: Disable Change of Rules
If you are seeing that someone who is security admin is able to elevate themselves to admin then something is wrong.
My understanding of what security admin is for is to allow the administration of users and security groups to a central IT function without them being able to see the data and or make changes to the application.
We don't really use the feature but if security admin allows you to save a view (and therefore see data) or elevate your own rights then it's not behaving itself or at least its function has changed alot.
But as others have said, it's fairly simple to write a TI to do this and then give a standard user the ability to publish their provate views.
My understanding of what security admin is for is to allow the administration of users and security groups to a central IT function without them being able to see the data and or make changes to the application.
We don't really use the feature but if security admin allows you to save a view (and therefore see data) or elevate your own rights then it's not behaving itself or at least its function has changed alot.
But as others have said, it's fairly simple to write a TI to do this and then give a standard user the ability to publish their provate views.
Technical Director
www.infocat.co.uk
www.infocat.co.uk
- Elessar
- Community Contributor
- Posts: 358
- Joined: Mon Nov 21, 2011 12:33 pm
- OLAP Product: PA 2
- Version: 2.0.9
- Excel Version: 2016
- Contact:
Re: Disable Change of Rules
Just for info: no, they cannot. Only Admin can grant ADMIN access.
I agree with gtonkin, a TI with "PublishView" is the best idea
-
- Posts: 45
- Joined: Tue Jan 07, 2014 12:07 pm
- OLAP Product: Cognos TM1
- Version: PA 2
- Excel Version: office 365
Re: Disable Change of Rules
Thanks to all for the discussion! I'll do it via the process. Thanks!
Regards
Mark