Security Admin and Data Admin -> need Administrator license?

[st2000]

I wondered if the sub-admin roles are intended to make some powerusers able to perform some minor tasks like pressing a TI-button or grant access to new employees?
Or are these roles intended to be kept into the administrators circle but dividing the responsibilities when having more than 1 admin-employee?
Do I need to buy a Administrator-licence when I want to make the Senior Controller giving access to his Juniors via Securityadmin-role? Or is this covered by a Contributor-license?

TIA, Stefan

[RJ!]

Have you looked to see if you can make the changes to the user profile with the BedRock processes?
If so, then the Senior Controller just needs access to those to perform the function you need.

[Edward Stuart]

Following RJ!'s response you can create a Process to amend Client/ Group access and assign users the security rights to run that process. Bedrock has processes which can do this

The IBM notes on TI Security are here:

http://www.ibm.com/support/knowledgecen ... admin.html

[st2000]

Thank you very much for your replies.
------------------------------------------------------
RJ referenced to bedrock, and there is a process, which sounds good: Bedrock.Security.Client.Create; it seems, that I only have to create an application and make form plus button available to power users to maintain security. I will try that.
Edward pointed to a site at IBM I didn't found myself; so also non-admin-users can start processes via a button without an own admin license. In 9.4.x this was allowed, but I was not sure what is valid today with 10.2.x

Best regards,
Stefan

[Wim Gielis]

so also non-admin-users can start processes via a button without an own admin license

Sure. If not, budgetting or forecast processes could not use Action buttons in websheets for example.

[tomok]

I would counter that taking a task that requires an administrative license, like adding users, security rights, even new dimensions and cubes, and putting the execution of that into a series of TI processes that can then be launched via an Action Button by non-admin users is probably a very grey area. Personally, I would be aggressive on the stance that it is not a licensing violation but I can definitely see the case where it could be considered so. You can literally do almost anything with a TI process and almost completely bypass the need to use the Admin front-end features in Perspectives. You are doing admin tasks, just not using the Admin front-end. Hmmm.

[st2000]

I though like this too. But when the function to run a process just needs a read user and processes operate on admins account, it might be OK. The pity is that IBM doesn't state somewhere clearly what's needed really. Cognos had a list of capabilities and somewhere I remember a list of needed licenses performing it. I'll never understand why they make it such a secret.

[st2000]

Aaah, here I found the details I searched for: http://www.tm1forum.com/viewtopic.php?f=3&t=7342