Cognos Group/Role as TM1 Security Client

Post Reply
A.Pete
Posts: 38
Joined: Fri May 18, 2012 7:06 pm
OLAP Product: TM1 , transformer
Version: 9.5 + 10.1 + 10.2 + 10.2.1
Excel Version: 2010 + 2008
Location: Sweden

Cognos Group/Role as TM1 Security Client

Post by A.Pete »

Hi

Not sure this question does work but are there a way to import Cognos 8/10 Groups/Roles into TM1 and clients? Ive setup everything so that when i click on add client or group in tm1 i need to select from the cognos namespace. I would however like to get a specific group in cognos BI and use that to slice the data people in that group should be able to access. I only get this to work if i import named users as clients and then import the groups as tm1 groups and map those... Well im not sure if this would work if my intention does work. Are there smarter ways to create this? I dont want to add a named user in TM1 manually if that user is added to a cognos BI group.

br
Peter
User avatar
jameswebber
Community Contributor
Posts: 188
Joined: Sun Nov 21, 2010 8:00 pm
OLAP Product: Cognos Express 10
Version: CE 10.1.1
Excel Version: 2010
Location: Wellington, New Zealand
Contact:

Re: Cognos Group/Role as TM1 Security Client

Post by jameswebber »

This is what I do in Cognos Express if it helps (pasted from a howto doc of mine)
Setup users in AD
The first step is to ensure the users are setup in Active Directory

This user account should be in the following AD groups:
(Located here IRL Groups > Cognos Express > CE System Groups)
CE Users
Then either:
CE Consumers Users (Read Access) Or CE Express Xcelerator Client Users
( I use this to control system access/licencing)

Create a Cognos Express Group
Once a user has been added they will need business user access in Cognos Express.
This needs to be done in Cognos Express Manager
Goto Launch > IBM Cognos Administration

Choose Security
Choose Cognos
Choose TM1 Security Folders
Create a new group
Give the group a new name etc

Add users to CE groups
When creating a group you can add members then.
Alternatively
Navigate to
Directory > Cognos > CE TM1 Security Groups
And choose more on the appropriate folder

Choose set members

Choose Add
Choose <AD option>
<user accounts>

Choose search (on the right)

Type in a name (last name better) and choose search
The results section will then show the users that you can put into this group by checking the check box and then clicking on the green arrow

Once all the users are added choose okay

Create TM1 permissions for group
The next step is to give the new group
In Server Explorer
Choose Security > Clients/Groups

Add new group
Choose Cognos and navigate to Directory > Cognos > CE TM1 Security Groups
Select group from the list and then put it in selected entries
Add by pressing okay.

The group will be added to the very right of the list of users in TM1.
Clicking okay and opening security again will display it in the correct place


There is no need to add the users on the left to this group.
If the user does not exist in TM1 security it will automatically be added.
TM1 security can now be added to this group to setup as needed.


Hope this helps
Post Reply