TM1 Forum

Hello all,

A TM1 model is transferred to IBM cloud with their offering. We log in with an IBM ID. IntegratedSecurityMode = 5.
If we want to extend the security groups, how do we do this ?
Thanks in advance !

Best regards,

Wim

We are cloud customers but we have all local groups that we copied over from our on-premise server. At the time we migrated (Sep 2019), you could not link up your AD groups with PA on the cloud so we stayed with local groups. When we want to create a new group we have a TI process that creates a local one for us and then we assign users to it. I don't know if you can synch up your AD groups with PA now yet or not. I've been too busy with other stuff to investigate.

We do exactly what Tom describes and was told to do this by IBM i.e. use TI to add Groups. You can still allocate the traditional way or via TI though.

Thank you Tom, George. I'll go with the TI function.

Alternatively, I could change the IntegratedSecurityMode to 1 since we still have a regular admin user for the model that is going to the remote server.

I'm pretty sure you can create groups from within paw/workspace. If I recall open a view on the control object }clientgroups scroll to the end of your groups and hopefully should see a little + symbol, click on this and add your group name.

If it's not here have right click on cubes and view the security properties and have a look for the + symbol on groups

Sorry can't be more specific, not got access to an environment this minute

Thanks, I will also have a look at it when I can. There is no model yet in PAW, only testing in TM1 Architect.

burnstripe wrote: ↑Mon Feb 01, 2021 10:24 pm I'm pretty sure you can create groups from within paw/workspace. If I recall open a view on the control object }clientgroups scroll to the end of your groups and hopefully should see a little + symbol, click on this and add your group name.

If it's not here have right click on cubes and view the security properties and have a look for the + symbol on groups

Sorry can't be more specific, not got access to an environment this minute

Hi,

With a view on the }ClientGroups cube, I could not find it but I found it when editing the cube settings. For security you can add a new group:
This is in a cloud environment that was set up by IBM last week, so very recent.

Thanks a lot.

HI Wim,

Burnstripe is correct, you can click on the "meatballs" menu next to Cubes, Edit Settings.
The widget added to the canvas will have Cube Security on columns and you will see a plus sign (Create user group) on the right below the security shield, next to the bin.

Thanks George, I also found it now, based on the explanations ! I was editing my previous post to reflect this information.