Cognos Analytics

 View Only
  • 1.  Restrict users from Report Studio

    Posted Mon August 19, 2019 09:19 AM
    At our installation, we have basically three levels of users...one with the ability to just run reports, one that can edit reports in Query Studio, and one that can edit reports in both Query and Report studios.  In the Cognos 10, when we have set up users to just be able to run reports, we have put then in the External_Consumers group. 


    In Cognos 11, users in the External_Consumers group do not have access to Query Studio, but they DO have access to Reporting (Report Studio).

    What rule do I need to set up to prevent a user from being able to edit reports?

    We use LDAP as our security repository.

    Thanks!


    ------------------------------
    Mike Wall
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Restrict users from Report Studio

    Posted Mon August 19, 2019 10:31 AM
    Dis you select to install legacy studios (Analysis, Query) when installed C11? By default, those studios don't get installed.





  • 3.  RE: Restrict users from Report Studio

    Posted Mon August 19, 2019 10:48 AM

    Yes, the legacy Query Studio is installed.  The problem is not the access to Query Studio.  The problem is that I do not know how to restrict access to Report Studio in Cognos 11.  It seems to work differently than it did in C10.

     

    I probably should note that I imported all of the Content Store, including users and rules, from C10 to C11.

     

    Mike


    Mike Wall

    Sr. Software Engineer
    p: 574-262-2800 | f: 574-206-0072
    e: Mike.Wall@ioipay.com
    a: 1710 Leer Dr., Elkhart, IN 46514
    toll-free: 888-697-0021
    logo
    Facebook Twitter Linked In


    CONFIDENTIAL NOTICE: This e-mail and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take any action in reliance upon this message. If you have received this message in error, please notify me immediately by return e-mail and promptly delete this message and its attachments from your computer. Please advise me immediately if you or your employer do not consent to the use of internet e-mail for transmission of business mail.   ­­  






  • 4.  RE: Restrict users from Report Studio

    Posted Mon August 19, 2019 10:53 AM
    You can restrict access via Capabilities. Same way we did it in c8 and c10.





  • 5.  RE: Restrict users from Report Studio

    Posted Mon August 19, 2019 01:50 PM
    How should it be set up in Capabilities?  I have the same setup for that role in C10 and C11, but in C11 the users still have access to the report writer.

    I tried following the instructions here (https://www.ibm.com/support/knowledgecenter/en/SSFUEU_8.0.0/op_grc_admin/t_com_restrict_end_usr_from_studios_but_run_op_rpts.html) but that didn't work.  On that page it says to select a link called OpenPagesSecurityRealm, which I don't see in my installation.

    I'm just really confused on what has changed between C10 and C11, and how simply not allow certain users to edit reports.

    ------------------------------
    Mike Wal
    ------------------------------



  • 6.  RE: Restrict users from Report Studio

    Posted Mon August 19, 2019 03:40 PM
    Given that QS will eventually be deprecated in favor of Report Authoring, I suspect you need a different strategy at some point.
    If your External Consumers can run reports but you do not want them to save changes then it is controlled by write permissions on the reports or the containing folder. Alternatively, new in CA are the custom roles where you could disable the Save option for a role. See the documentation for details.  https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ag_manage.doc/c_ca_mng_cust_roles.html

    ------------------------------
    NORBERT Bracke
    ------------------------------