TM1 Forum

Hello,

I my knowledget in TM1 security is pretty basic.

According to the security manual, "WRITE" on dimention gives permission to change/delete/save private subset, and "WRITE" on cube gives permission to change/delete/save private view.

What I want is, users can save private subsets and private views, but not allow them to change or delete anything.

Is there any way to do this?

Thanks.

P.S. We are using TM1 9.1 on 64

hpark wrote:Hello,

I my knowledget in TM1 security is pretty basic.

According to the security manual, "WRITE" on dimention gives permission to change/delete/save private subset, and "WRITE" on cube gives permission to change/delete/save private view.

What I want is, users can save private subsets and private views, but not allow them to change or delete anything.

Is there any way to do this?

Thanks.

P.S. We are using TM1 9.1 on 64

I think you may have misread something.

Read and Write permissions relate to the user's ability to either see (Read) or change( Write) the data. All users can save their own views and subsets of the data that they can see.

Thank you so much, Alan.

It seems you are right!

I interpreted that "Write" privilege is required to save private subsets and view because

In TM1 Security Guide(p6-7) -----------------------------------------

Write:
Cube
Members of the group can read and update cells. They can save
private cube views. Write access does not apply to cells identified
by consolidated elements or to cells derived from rules.

Element
Members of the group can read and update the cells identified by
the element and edit attributes of the element.

Dimension
Members of the group can edit element attributes, edit element
formats, and create private subsets for the dimension. Members
can also edit attributes for the dimension itself.

----------------------------------------------------------------------------

hpark wrote:Thank you so much, Alan.

It seems you are right!

I interpreted that "Write" privilege is required to save private subsets and view because

In TM1 Security Guide(p6-7) -----------------------------------------

Yes, the manual's technically correct, but I can see how it can be misleading. The users need to have SOME access (be it read or write) to be able to see the cube (for view creation) and dimensions (for subset creation), so when they have Write permission then they certainly have the ability to create those objects. It's just that it's not the ONLY permission that confers that ability, which I agree wasn't entirely clear from the manual sections that you quoted.