TM1 Forum

Hi all,

If you have the need to do account level security across many departments and cost center combination's, what is the best way? This client of mine has over 1000 GL accounts, 150 Depts, and over 100 cost centers. They only want certain accounts to be visible for each Dept/Center combination. I know I could do this manually by setting up many groups designated as Dept/Center and then flag the accounts that need to be visible and either read/write, but it seems like there would be a more efficient way.

1) Is there a way to import excel or text files that have the security parameters? I used to do this via access tables for them in their old CP application they outgrew.

Also, can someone give me the 10,000 ft level explanation and rationale for control cubes? I've read a good bit in the developers and operational guides, but I still think I'm missing something. Would it benefit me to do my security in a control cube rather than using the "system" or "data" cube (hope I phrased that correctly).

Thanks,
Christian

P.S. It seems like from what I've read, a control cube is most beneficial if I am doing cell-level security (which would be my case represented above). I just wonder if there's a faster way to create the security than having to manually set it for each Dept/Center combination.

Hello

Like system cubes, control cubes also support rules or they can be updated using a TI process. Choose whichever solution is more handy and maintainable.

Thanks Wim.

Also, I think I found an example of where a spreadsheet is used to update security at the cell level for specific dimensions. That would help in the scenario of which I spoke above.

For anyone else who is just learning about control cubes, there is a large section on them in the "Administer and Deploy" section of the TM1 Operations Guide. I should have thought to look there sooner.

Christian,

Christian wrote:there is a large section on them in the "Administer and Deploy" section of the TM1 Operations Guide

I wonder which operation guides you were talking about. I will check both 9.4 and 9.5 documents, but cannot find it.

Thanks,

David

David wrote:

Christian wrote:there is a large section on them in the "Administer and Deploy" section of the TM1 Operations Guide

I wonder which operation guides you were talking about. I will check both 9.4 and 9.5 documents, but cannot find it.

In the 9.5 documentation it's actually in the Developer's Guide (tm1_dg_dvlpr.pdf), chapter 6, "Controlling Access to TM1 Objects".

(The Operations Guide (tm1_op.pdf) contains a chapter on securing the connection to TM1 (Chapter 7, "TM1 Security Overview") but that isn't the subject of this thread so I presume it's the Developer one that you're after.)

Alan, thank you!