TM1-C8 Security - Reports

[Toto]

Hello,
our client has Cognos 8 and starts with TM1 now. Later the TM1 cube should be used within C8-Reports. What would you think is the best way to implement security. Using C8-security within TM1 or using LDAP directly when C8 uses LDAP?
What are the pros & cons?
Are there any known issues when developing C8-reports with TM1-cubes using C8-security?

Thanks a lot,

Toto

[Michel Zijlema]

Hi,

You could use the CAM security option for TM1 (IntegratedSecurityMode=4 and CAM* tmts.cfg parameters) which is aimed at integrating TM1 security with C8.

Michel

[SPSS]

i've done an implementation with TM1 using C8 Cam security. It works well. Pick the TM1 dimension on which you want to apply security, say Cost Centre. Then in LDAP or C8 Admin create as many groups as Cost Centre elements with the SAME name. (this is if you want security at the N - level). Then import these groups into Tm1 and write a simple rule in the ElementSecuritycube of Cost centre of :
[]:S IF(!}Group @= !Cost Centre, WRITE, READ); This is the mapping of groups to cost centres. So next time a user logs into TM1 he/she will get access only to his/her Cost Centre because associated with the group name setup in ldap would be the user's name. Same if they were to log into BI with BI using TM1 as a data source.

N.B. you don't import users into tm1 from c8. just groups