TM1 Forum

Hi,
I'm implementing TM1 9.5 with TM1 Contributor. I used single sign-on (integrated login) with Active Directory (AD) for my security setting.
So, if a user has logged in to his Windows, then he doesn't have to entry username or password when opening the TM1 Contributor.
This single sign-on is implemented by using IBM Cognos Connection as the mediator between TM1 and AD.

Furthermore, the access right for each node in Contributor is assigned to a certain AD groups. So, for a user to has access to Contributor, I only have to assign him to a certain AD group.

My question is: Is it possible to block a group from accessing the Contributor during a certain period of time?

Thanks in advance for your help and answer guys n gals.

Regards,
Comma

Hi guys,
I'm still expecting answers here.
Really appreciate your help

You can deactivate the application in the Contributor. While deactivated, any user can't access the application except administrator.

Hi DTA,

Thanks for your reply, but I don't want everyone to be unable to access my application.
I only want some groups to be unable to access it, while the other groups still can input data to the application.
Is it possible?

comma wrote:Hi DTA,

Thanks for your reply, but I don't want everyone to be unable to access my application.
I only want some groups to be unable to access it, while the other groups still can input data to the application.
Is it possible?

You can set the security for clients/groups and Cube Security. For the group you don't want to access, you choose the Access Privileges to be "None".

DTA wrote: You can set the security for clients/groups and Cube Security. For the group you don't want to access, you choose the Access Privileges to be "None".

Can I make it to be flexible? I can do what you said, but then I have to change the security assignments each time I want to open / close the access of certain groups.

If you have definite logic of client's assignments to the TM1 Contributor you can create TI process, that will change client's security assignments or create rule in control cubes.

Maybe I'll try to create the TI.
Thanks asvlad

There is a group which contributor creates called {everyone that appears to control users access to tm1 applications in one of architect security cubes of contributor.
it is as it is working in our customer right now.
best regards,
Paolo