TM1 Forum

Anyone have IBM Cognos Express Consumer User licenses?
Seems this licence type is new to CE 9.5

Looks great that is allows read access to all the systems but I'm not sure how to technically set this up.
Within IBM congos administration I will need to give the user (or Ad group) access to:
Express Users and Express Xcelerator Client Users?

Is the reading/writing simply managed by creating new read only groups in TM1?

This is the info from IBM, but I can't find anything very useful in how to configure this properly.

http://www-03.ibm.com/software/sla/slad ... 230048B42F

For each use authorization acquired, Licensee may use the Program to: (i) access the IBM Cognos Connection Portal to select reports, view reports and set personal preferences (for languages, time zones etc.); (ii) run and schedule reports created by a licensed IBM Cognos Express modules, interact with prompts, output the reports to other formats such as PDF and CSV, subscribe to a scheduled report, create and manage report folders and portal pages and use the Cognos Connection Portal to create and consume portal pages, including use of all of the portlet types provided with Cognos Connection, and personalize standard reports; and (iii) analyze Advisor views that have been created by others but is not authorized to save changes to those views. Licensee will configure the Program to ensure that those users are restricted from write-back access to the IBM Cognos Analytic Server or using any other Program functionality.

Note that the Consumer licence is not able to create or save anything; nor is it able to enter any data whatsoever. It is a read-only licence.

Hi James

We are using Consumer licenses in CX 9.5.

'including use of all of the portlet types provided with Cognos Connection'

As much as I understand this is the part that enables Consumers to get read-only access to Xcelerator objects. You can use Xcelerator through TM1 portlets only (or maybe the simple HTML Viewer portlet, referencing the Xcelerator Web URL); you can create pages in Cognos Connection and then add the TM1 viewer or html viewer portlets to these pages. It also means that your Consumers may use Xcelerator Web only but not Excel add-in or Architect. At least this is how I understand the terms of the license and we use Consumer licenses this way

Is the reading/writing simply managed by creating new read only groups in TM1?

Yes , I think so, however yous should use CAM authentication so that your users do not have to log in twice (once to Cognos Connection and then to Xcelerator on the Cognos Connection page containing the portlets).

Within IBM cognos administration I will need to give the user (or Ad group) access to: Express Users and Express Xcelerator Client Users?

No, the role 'Express Xcelerator Client Users' has been created for enabling the download of the Excel add-in. Users belonging to this group are able to download the add-in from the welcome page. You have to assign a user to a group that has read-only rights for cubes in Xcelerator. You can do this in Cognos Administration and then you can import the users and groups to Xcelerator (as normally when using IntegratedSecurityMode 4 or 5).

Thanks Mvaspal for your reply.

So your impression is the a Consumer licence can't use the Xcelerator Client?
Have you read that somewhere? I thought they could use the client simply the user wasn't allowed to write back.

My users don't need to logon twice because I have setup SSO http://www.ibm.com/developerworks/data/ ... ml?ca=drs-
I'm using AD for the groups so my query is really where I map my AD groups to CAM security.

Re your comment

You can do this in Cognos Administration and then you can import the users and groups to Xcelerator (as normally when using IntegratedSecurityMode 4 or 5).

I thought due to this flash release https://www-304.ibm.com/support/docview ... 5257&aid=1
the AD group were not meant to be imported into TM1?

This is my stab of licensing to current security mapping is (AD group = IBM license then listed Cognos System security groups assigned in IBM Cognos Administration)
But our IBM partner hasn't really given me much clarity here either, wondering how others have set this up

AD System Admin (= IBM Cognos Express Administrator 9.5 License)
[*]Express Administrators
[*]Express Data Advisor Users
[*]Express Framework Manager Users
[*]System Administrators


AD Xcelerator Client User (= IBM Cognos Express Xcelerator User 9.5 License)
[*]Express Xcelerator Client Users
[*]Express Architect Users
Can have read or write access to any cxmd cube via TM1 server explorer security

AD Advisor users (=IBM Cognos Express Advisor User 9.5 License)
[*]Express Users
Can have read or write access to any cxmd cube via TM1 server explorer security, a matching AD group for each TM1 group will need to be created to workaround the IBM security venerability

AD Reporting users(=IBM Cognos Express Reporter User 9.5 License)
[*]Express Users
Can have read or write access to any cxmd cube via TM1 server explorer security?
I'm not really sure how I stop a reporting user from running an advisor view and a advisor user from running a reporting studio report as the only security seems to be whether they are a user or not.


AD Consumer users(=IBM Cognos Express Consumer User 9.5 License)
AD Member of AD Xcelerator Client User, AD Advisor users, AD Reporting users
Only have read access to any cxmd cube via TM1 server explorer security

AD Complete users[/b} (=IBM Cognos Express Complete User 9.5 License)
AD Member of AD Xcelerator Client User, AD Advisor users, AD Reporting users
Can have read or write access to any cxmd cube via TM1 server explorer security, a matching AD group for each TM1 group will need to be created to workaround the IBM security venerability for advisor usage

So your impression is the a Consumer licence can't use the Xcelerator Client?
Have you read that somewhere?

I have read it in your post

A Consumer is allowed to:
(i) use the Cognos Connection to run reports
(ii) again, use the portal + export content + use any portlet (including TM1 Viewer portlets)
(iii) view Advisor objects

So it is quite clear - at least to me - that a Consumer is not allowed to use the excel add-in.

AD Reporting users(=IBM Cognos Express Reporter User 9.5 License)
[*]Express Users
Can have read or write access to any cxmd cube via TM1 server explorer security?

I would say rather yes than no but I am really not sure about this. A Reporter User is allowed to create objects in Architect so he will be an Admin or DataAdmin user and so he is able to write data back to the cube.

Doh,
Thanks Mvaspal helps if I read rather than assume what is there.

Just went to clarification to our IBM partner and they confirmed that using xcelerator with read was okay.
Orginally I read

licensed IBM Cognos Express modules

as being xcelerator client.