Planning Analytics

 View Only
  • 1.  Different Privileges for Same Client on Different Client Installs?

    Posted Thu May 13, 2021 02:59 PM

    We've run into a situation that we have not seen before and am hoping that someone else has!  And has a solution for!

     

    On of our customers is an on-premises PA customer.  They also have Cognos Controller and Cognos Analytics.  The use CA solely for security for Controller and PA (Security mode 5).  They have Active Directory/Cognos Analytics for user authentication.  They use FAP in Controller to trickle changes from Controller into PA.  The have two environments:  DEV and PROD - configured identically.  Rather than having Perspectives installed on their workstations, they expose Perspectives through Citrix.  We helped upgrade them from TM1 10.2.2 to PA several years ago and helped them to set up FAP and CAM security more recently (about a year ago).  They have PA 2.0.3 Server and PA 2.0.2 32-bit Client for the Citrix Perspective installs.  This configuration works fine on-premises.  PA is installed on a Windows 2016 VM.

     

    They have decided to move their on-premises servers to Azure cloud.  They have basically cloned the VMs (and shut the originals off) in their DEV environment.  PROD is still on-premises.  They can log into DEV Controller on its VM in Azure cloud, DEV PA on its VM in Azure cloud and DEV CA on its VM in Azure cloud.  All of that seems to work fine.  On the DEV PA VM, they are logging in with a user in the ADMIN group and have exactly the privileges expected.  Instead of Citrix, the customer created a Windows 10 workstation in Azure and installed the PA client software and Office 365.  When they RDP to the Windows 10 workstation (as exactly the same user in the built in ADMIN group as they use directly on the Windows 2016 VM where PA is installed) and launch Perspectives, it launches fine.  They can log in and open Websheets from the Applications folders in Server Explorer.  The Websheets open fine in Perspectives.  They can change SUBNMs and refresh the Websheet.  But here's where things get wonky.

     

    1. If the user types a value over a DBR in the Windows 10 Perspectives session, the DBR vanishes and the value entered shows in the spreadsheet cell.  A refresh sheet still refreshes all other cells except the one that no longer has the DBR in it.  The customer has verified the Allow Editing Directly in Cells Excel setting.   The customer has tried testing with multiple users including the user in the built-in ADMIN group.  The results are the same.
    2. Again, on the Windows 10 Client machine in Perspectives, if the customer right clicks on a dimension in the Windows 10, they do not have ADMIN privileges (e.g. Edit Dimension Structure) even though they are logged in as a user in the built-in ADMIN group.  They cannot create dimensions or cubes or change security settings.  The customer has verified that the Properties window shows exactly the same user on the PA VM (Windows 2016 Server) and the Client VM (Windows 10). 

     

    Does anyone have any idea what could be causing what is, presumably, the same user in both sessions (PA Server VM – Windows 2016 Server and Client VM – Windows 10) to have very different privileges and cause DBR formulas to be overwritten with values on the Windows 10 Perspective installations for any user?

    Thanks!
    Chris Wolfe
    LPA Software Solutions, LLC.



    ------------------------------
    Chris Wolfe
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: Different Privileges for Same Client on Different Client Installs?

    IBM Champion
    Posted Thu May 13, 2021 03:46 PM
    Edited by System Fri January 20, 2023 04:10 PM
    Not sure on issue 1, it sounds almost as if the RDP session is treating them typing a number as a copy/paste.

    But the second issue sounds like you are simply missing the tm1p8.lic file from the appdata folder. You need the lic file for the administrative functions to be enabled.

    ------------------------------
    Declan Rodger
    Technical Director
    Spitfire Analytics
    ------------------------------



  • 3.  RE: Different Privileges for Same Client on Different Client Installs?

    Posted Fri May 14, 2021 06:29 AM
    Hi Declan,

    Thank you for the quick response.  We'll check with the customer on that.  Not sure why the tm1p8.lic would be missing but that does sound like the resolution!

    I can't see why RDP would be treating typing a value like a copy/paste, but a copy/paste would overwrite a DBR formula so that is a good idea on a path to follow.  Will try to research that more.

    Thanks again for the insights!
    Chris Wolfe
    LPA Software Solutions, LLC.

    ------------------------------
    Chris Wolfe
    ------------------------------



  • 4.  RE: Different Privileges for Same Client on Different Client Installs?

    Posted Mon May 17, 2021 11:05 AM
    Just to close the loop on this, in case anyone else has the same issues.  The root causes were different.  The root cause of the Admin privileges in the Client environment was a result of the point Declan made (thank you!) of the tm1p8.lic file missing from the appdata folder.  The customer restored the file and the Admin functions are available again.  For the other issue - typing a value into a DBR formula in Perspectives overwrites the DBR formula - the customer found that the issue was resolved after downgrading Excel from Office 365 to Office 2016 per:  https://tm1forum.com/viewtopic.php?t=15091 

    Thank you again to Declan for the insight!
    Cheers,
    Chris Wolfe
    LPA Software Solutions, LLC.

    ------------------------------
    Chris Wolfe
    ------------------------------



  • 5.  RE: Different Privileges for Same Client on Different Client Installs?

    IBM Champion
    Posted Mon May 17, 2021 04:05 PM
    Did you manage to work out why the lic file was missing?
    It used to be something that I remember coming up reasonably often to the point that if I remember correctly, there were different installers previously where the client installer didn't include the lic file by default.
    But it's something that I haven't seen anyone mention for a long time.

    ------------------------------
    Declan Rodger
    Technical Director
    Spitfire Analytics
    ------------------------------