TM1 Forum

Hi all,

i'm trying to set up security on my test cube, but even when i set up all parameters on READ, the selected user can still update data in the cube.

First i'm logged as Administrator.
I have TestCube with Dimension1(2 string elements) and Dimension2(3 simple elements). TestUser is a member of TestGroup. In ClientGroups cube is TestUser member of DataAdmin and TestGroup. On dimensions in CellSecurity_TestCube (Dimension1, Dimension2, }Groups) right click -> Security -> Elements Security Assignments... on each element of the dimension for TestGroup is set 'READ', in Admin Groups (ADMIN, DataAdmin, SecurityAdmin) are privileges set to Admin, Admin, Read. In the rule in CellSecurity_TestCube is []=S:'READ';

In Security Assignments on Cubes Admin Group (ADMIN, DataAdmin, SecurityAdmin) are set to Admin, Admin, Read (i can't change it), TestGroup is set to Read.

After re-login with TestUser, i can change the data in TestCube, but i need, that the cells are read only. Can someone help me with this? I don't know what i'm doing wrong.

Thanks,
Lado

Legemza wrote:In ClientGroups cube is TestUser member of DataAdmin and TestGroup.

Members of DataAdmin always have ADMIN access to all cubes except the security cubes.

When you use rules to determine security you need to refresh the security.
Right click on server name, pick Security -> Refresh Security.
You can also use SecurityRefresh function in TI.

tomok wrote:

Legemza wrote:In ClientGroups cube is TestUser member of DataAdmin and TestGroup.

Members of DataAdmin always have ADMIN access to all cubes except the security cubes.

Just to add to and clarrify Tomok's answer. Remember that TM1 security is additive so the highest level of security assigned to an objects for all the groups to which a user belongs will be the level that is applied.

Thx tomok, now it's working
It is possible to set up the security in tm1 web also on excel cells? Because now i can still write into the cell that is read only in the cube (after rebuild changes are not applied, that's correct), but i need, that the cell is read only also in excel.

You can do this by using worksheet protection in Excel (note, if you protect a sheet then you must make sure that cells that should be writeable in TM1 are unlocked in Excel.)

Hi, i tried this, but it's not working properly (by asigning an user to group). I know how to lock cells in excel, but i don't know how to do this (example: logged user 1 from group 1 will have some cells ulocked for writing and user 2 from group 2 will have all cells locked (he can't edit the cells)).

Important question:
can i assign security rights only for groups or also for users? I need that user can see only elements of dimension, that is assigned to him. Is is possible? thanks