Configuring AD/CAM/Cognos group with ADMIN privileges

Post Reply
Posts: 21
Joined: Tue Sep 10, 2013 3:34 pm
OLAP Product: TM1
Version: PA 2.0
Excel Version: 2016

Configuring AD/CAM/Cognos group with ADMIN privileges

Post by Kingsley » Tue Sep 19, 2017 2:55 pm

Hi fellow Gurus,

I have an AD\TM1 Admin group I want to maintain outside of TM1. How should I go abouts to automatically granting these users TM1 Admin access?
I've tried setting a security cube rule to grant ADMIN to AD\TM1 Admin users but noticed it doesn't take effect when they login for the first time or until SecurityRefresh is triggered. Which lead me to believe that shouldn't be the best approach.

Your input is much appreciated.

User avatar
Steve Vincent
Site Admin
Posts: 1049
Joined: Mon May 12, 2008 8:33 am
OLAP Product: TM1
Version: 10.2.2 FP1
Excel Version: 2010
Location: UK

Re: Configuring AD/CAM/Cognos group with ADMIN privileges

Post by Steve Vincent » Wed Sep 20, 2017 8:48 am

Correct; TM1 doesn't seem to behave when you try to use rules to govern security. We got around it by using TIs instead. Yes, it isn't instant but you can provide access to the external group to run the TI, then the user just has to run the TI on their first log on.

Word of caution tho; we've found this will crash the TM1 client. The task completes fine and logging in again will have admin access, but it seems to dislike the refresh of the explorer afterwards and crashes as a result. Not sure what version you are using, but we've seen that on 10.2.2 FP1 and FP7
If this were a dictatorship, it would be a heck of a lot easier, just so long as I'm the dictator.
Production: TM1 64 bit 10.2.2, Windows 2008/2012 Server. Excel 2010, IE11 for t'internet

Post Reply