Planning Analytics

 View Only
  • 1.  To Setup access rights for various users in PAW which align with TM1 Architect

    Posted Thu July 22, 2021 07:05 AM
    Dear all,

    Appreciate your expert advice in the below scenario:
    Client is using Planning Analytics on premise solution, they have setup various access rights in TM1 Architect.
    Now they want to align the rights with PAW.
    We tried but only Admins have the access rights in PAW workbooks , others are unable to login.
    Kindly let me know the process to setup PAW access on Premise solution which would be align with TM1 Architect.

    Thanks,


    ------------------------------
    BHUPENDRA BERDIA
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: To Setup access rights for various users in PAW which align with TM1 Architect

    IBM Champion
    Posted Thu July 22, 2021 08:51 AM
    Hi Bhupendra,

    The two security models are for all intents and purposes separate.

    Roles in PAW define what users can do in PAW in terms of creating and editing Workbooks, Views, building applications etc. You create groups to allow users to access shared content.

    Security Groups in TM1 define what users have access to in terms of TM1 objects - cubes, dimensions, cells, processes etc.

    There has been much discussion about having a single framework for managing security across both environments but IBM can comment further on this.

    ------------------------------
    George Tonkin
    ------------------------------



  • 3.  RE: To Setup access rights for various users in PAW which align with TM1 Architect

    Posted Fri July 23, 2021 05:38 AM
    Note also that users need to be explicitly set-up in PAW via the admin screens in PAW.  This sounds like the missing piece since end-users can not log-in.
    Make sure the customer is licensed for the end users to use PAW though, sounds like they may not be hence only the admin users being set-up in the product.

    ------------------------------
    Steven Rowe
    ------------------------------



  • 4.  RE: To Setup access rights for various users in PAW which align with TM1 Architect

    IBM Champion
    Posted Fri July 23, 2021 05:57 AM
    There may be another twist if CAM is being used as clients can be created on login albeit without security groups.
    The CreatenewCAMClients TM1S.cfg parameter controls the behaviour.

    Where the user existed in PAW but not in TM1, users seemed to be able to access workbooks but widgets would give an array of errors due to no access to underlying TM1 databases and objects.

    ------------------------------
    George Tonkin
    ------------------------------