How to give ownership access

Post Reply
akbiswal
Posts: 3
Joined: Thu Jul 13, 2017 4:28 pm
OLAP Product: Cognos
Version: Cognos
Excel Version: ms office 2007

How to give ownership access

Post by akbiswal »

How can I give ownership access to the user in tm1 architect.
User will get the same access in Cognos tm1 contributor.

Thanks
Ashish
User avatar
JulianS
Posts: 20
Joined: Fri Jul 07, 2017 1:34 pm
OLAP Product: TM1
Version: 10.3
Excel Version: 2013

Re: How to give ownership access

Post by JulianS »

Hi Akbiswal,

Probably the easiest way to is from the beginning with native TM1 under architect:

First of all goto 'View' >> 'Display Control Objects' and tick it.(this will show you all the extra cubes that TM1 uses to do its magic)

1.Add A User

Right Click Server >> Security >> Clients/ Groups

Add a new client or a new group if required,

(an example could be add the user 'Test_User' into a new group called 'Test_Group'.)

Right click on 'Cubes' and then click on 'Security Assignments'

This will allow you to make Cubes readable or writable to the new group.
It Creates a cube called }CubeSecurity

Security is a many layered thing in TM1, if you have implemented Dimension Security there will be a cube called
'}DimensionSecurity' if you have this cube open it up and ensure that all the dimensions in your cube have at least 'READ'.

If you have element security you should have a cube that looks like
}ElementSecurity_<dim Name>. Ensure that all items that you want the user group to write to are all 'WRITE'.

And then we get into CellLevel security (but we'll talk about that if you need it later)

For a normal (non admin user) to be able to write to a cell.

They must must have 'Write' privilege to the Cube (If cube }CubeSecurity exists)
And at least 'READ' privilege to the Dimension (If '}DimensionSecurity' exists)
And at least 'WRITE' to the Element (If '}ElementSecurity_<dim Name>'. exists)

This is such a good system so to stop all from a group writing to a cube, you just change the }CubeSecurity for that group to read.
If a user is a member of a multiple groups (one of which still has 'WRITE') then the still write to the cube.

(This is very handy for keeping normal users out whilst letting the central reporting do their adjustments)

If your are using TM1 contributor and workflow do not change anything regarding the workflow dimension as this is controlled externally depending upon which version of TM1 Contributor you are using and its type.

The versions I've used either automate security on workflow at Cell level or Element level)

Personally I would take ownership of the node in 'Application Web' or 'Contributor', then try and look at the same node in architect (as the same user).

If you've got anything wrong architect will tell you, either the cube wont be in the list, you wont be able to open it (dimension security missing),
then have a look at each of the cubes dimensions in turn, making sure that what is there is what you think it should be.

Apologies for any typos etc.

Hope this helps, give us all a shout if your still stuck.

Jules

Capture30.PNG
Capture30.PNG (12.72 KiB) Viewed 2477 times
User avatar
JulianS
Posts: 20
Joined: Fri Jul 07, 2017 1:34 pm
OLAP Product: TM1
Version: 10.3
Excel Version: 2013

Re: How to give ownership access

Post by JulianS »

PS

If you have these '}' cubes visible, you can open them up as normal cubes just by double clicking on them.

This makes them far easier to examine when dealing with lots of groups etc. :D

Jules
Post Reply