TM1 Forum

We are looking into switching to using Cognos BI for authentication since it does seem like IBM is moving this direction for security with TM1. Has anyone been able to find a way to automate the import of users from BI? Manually importing hundreds of users doesn't sound like a lot of fun.

I'll do a little research but if any has already done this I wouldn't mind hearing your thoughts.

Not sure why you would need to import users from BI. When users log on to a TM1 instance that has IntegratedSecurityMode set to 4 or 5 then the TM1 Client gets created on the fly and user group membership in TM1 is refreshed. Required groups can either be imported manually or simply added using TI beforehand. They will be matched with the CAM groups if the group names match. Users pretty much import themselves the first time they log in.

The way I had done in past, was to extract all the users and the groups to their respective .csv files using Cognos SDK. Then import them into TM1 using TI and map clients to groups.

sachin wrote:The way I had done in past, was to extract all the users and the groups to their respective .csv files using Cognos SDK. Then import them into TM1 using TI and map clients to groups.

I may have to go this route. The reason for needing to import users is so that I can convert security from TM1 to BI.

I understand what you're trying to do but I think you just need to import the Cognos namespace security groups and not the users. If the user belongs to a BI group that you imported and gave access to, they will inherit it once they login.

Personally, though not officially supported, I leveraged a SQL script to query the content store in the database and retrieve all the security groups. Then the TI process imports them.