Cognos Analytics

 View Only

  • 1.  Securing Data Items

    Posted Thu July 25, 2019 12:49 PM
    Hi All,
    Would anybody be able to point me in the right direction on how I can provide security to specific data Libraries, tables or even fields in Cognos Analytics?

    I have worked on BI tools before that can restrict the data that specific users see to only the data items that are relevant - even to the point of having specific reports 'tailor' the data presented to the user according to the permissions they are given. Being new to Cognos, I'm not clear as to where I should be doing this: in Analytics or Framework Manager.

    Your guidance would be appreciated.
    Many thanks

    ------------------------------
    Andy Williamson
    Business Systems Analyst
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Securing Data Items

    Posted Fri July 26, 2019 07:55 AM
    Edited by System Fri January 20, 2023 04:40 PM

    @Andy Williamson
    You can use Framework Manager to apply data level security and/or Object security based on Cognos Groups. Data Level security will restrict what data a user can see. Object security will restrict what objects are available to a user when they author reports.

    Data Modules currently do not support object level security, however with 11.1.1 you can apply data level security and hide columns or tables you do not want exposed to the end user using that data module.

    Further details on Object and Data level security for Framework Manager can be found in the below link:

    https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ug_fm.doc/c_securityinframeworkmanager.html


    Details on Data Level Security for Data Modules can be found in the below link:

    https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ca_mdlg.doc/t_ca_mdlg_secure_data.html


    Also, here is a link to a blog post with a matrix on the functionality available for Data modules and Framework Manager

    https://community.ibm.com/community/user/businessanalytics/blogs/michael-mcgeein/2019/05/15/starting-a-new-modelling-project-fm-or-data-module?CommunityKey=6b10df83-0b3c-4f92-8b1f-1fd80d0e7e58&tab=recentcommunityblogsdashboard



    ------------------------------
    DENNY NAREZNY
    ------------------------------

    Original Message


  • 3.  RE: Securing Data Items

    Posted Mon August 12, 2019 03:36 PM

    The link you provided for comparison is as of 11.1.2, https://community.ibm.com/community/user/businessanalytics/blogs/michael-mcgeein/2019/05/15/starting-a-new-modelling-project-fm-or-data-module?CommunityKey=6b10df83-0b3c-4f92-8b1f-1fd80d0e7e58&tab=recentcommunityblogsdashboard, is this still true as of 11.1.3?



    ------------------------------
    Jo Marie Sellner
    ------------------------------

    Original Message


  • 4.  RE: Securing Data Items

    Posted Fri July 26, 2019 09:32 AM
    Best approach is to define object security in your Framework Manager model, see https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ug_fm.doc/c_securityinframeworkmanager.html

    When it comes to data security this can be also defined in Framework Manager, and also, for example by security filters for Data Modules, see https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ca_mdlg.doc/t_ca_mdlg_secure_data.html

    #CognosAnalyticswithWatson


  • 5.  RE: Securing Data Items

    Posted Fri July 26, 2019 11:12 AM
    Be aware of a current bug when using filters for Data Modules as described the in the link below. 

    It will work as described however all your definitions will double every time you refresh the data server connection.

    By the time I noticed this, I had 10's of thousands of duplicates.

    [When it comes to data security this can be also defined in Framework Manager, and also, for example by security filters for Data Modules, see https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.1.0/com.ibm.swg.ba.cognos.ca_mdlg.doc/t_ca_mdlg_secure_data.html]

    I am very careful to go to the data module and remove the duplicates each time the data server needs updating or refreshing.

    Should you already be in a state where they have grown into the 1000's you can use CTRL+A to select all the definitions, including the ones not shown on screen and delete. Unfortunately you will of course then have to start again!

    ------------------------------
    Jonathan berry
    ------------------------------

    Original Message


  • 6.  RE: Securing Data Items

    Posted Sun July 28, 2019 04:32 PM
    That bug is fixed in 11.1.3.

    I think the expectation was that a data warehouse would be fairly stable and that the one-time hit of importing the metadata and sampling would be a ...one-time thing.

    ------------------------------
    IAN HENDERSON
    ------------------------------

    Original Message