Cognos Analytics

 View Only
Expand all | Collapse all

Login User Based Access on Dash Board.

  • 1.  Login User Based Access on Dash Board.

    Posted Tue February 23, 2021 11:41 AM
    Hi Team !
     i have a requirement that User should see only their Bank Branch Data on Dashboard, i have done it with report , but unable to find a way to configure Dashboard as per User Login.
    Thanks in advance.

    ------------------------------
    Hashim Raza
    ------------------------------

    #CognosAnalyticswithWatson


  • 2.  RE: Login User Based Access on Dash Board.

    Posted Wed February 24, 2021 05:42 AM
    Hi Hashim, 

    We also have data for different Cognos users in the same tables and distinguish the data rows by a certain column (called database_user). The Framework Manager model uses Macros to assign different Cognos Data Sources to the Cognos users. The different Cognos Data Sources use different database users for the same database (= Catalog). For each FM query object we have a filter implemented like: [database_user] = {current_user} such that each Cognos user automatically filters only the data of its own database user in the end. It works fine for us. 

    Could you please tell me the idea of your current solution for your reports? 

    Regards

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 3.  RE: Login User Based Access on Dash Board.

    Posted Wed February 24, 2021 10:54 AM
    HI Philipp
     i just Created a table with the column of Branch_Id and User Login ID, made a relationship with the report view, than used a [NAME] = #sq($account.defaultName)# in the main query, and its working fine for report.
    let me try your suggested solution for the Dashboard.
    Thanks.


    ------------------------------
    Hashim Raza
    ------------------------------



  • 4.  RE: Login User Based Access on Dash Board.

    Posted Wed February 24, 2021 12:00 PM
    Hi Hashim, 
    your approach should also work in a Framework Manager model on which Dashboards could be based. (For Data Modules I'm not sure but I think the Session Parameters aren't available there.) But that brings me to the idea that - at least in the latest CA version - Report Queries can be turned to Data Sets which in turn can be used in Data Modules or in Dashboards directly. 
    Best

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 5.  RE: Login User Based Access on Dash Board.

    Posted Wed February 24, 2021 09:59 PM
    Session parameters are also accessible in Data Modules and Dashboarding.
    At the moment there is no UI to check/add/override any of these session parameters.
    // Henk

    ------------------------------
    HENK CAZEMIER
    ------------------------------



  • 6.  RE: Login User Based Access on Dash Board.

    Posted Mon March 01, 2021 02:11 PM
    Henk,

    I've tried several different ways to get a session parameter filter to work in a Data Module based on Data Server source and keep getting no data. First I tried to directly port the macro over from FM as follows on the cogipf_userid column in Audit:

         #sq($account.defaultname)#

    Looking at the filter condition though it wouldn't work because of the extra apostrophe:

          Equals '#sq($account.defaultname)#'

    So I tried removing the sq() portion of the macro and still got no data. What is the secret to getting session parameters to work?


    ------------------------------
    Robert Hofstetter
    ------------------------------



  • 7.  RE: Login User Based Access on Dash Board.

    Posted Tue March 02, 2021 11:34 AM
    Hi Robert, 
    in FM I use the syntax: # $account.defaultName #
    and in reports: # sq( $account.defaultName ) #
    in Data Modules I have no experience though.

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 8.  RE: Login User Based Access on Dash Board.

    Posted Wed March 03, 2021 03:34 AM
    Hi Hashim, 
    ​After reconsidering your situation I think my post from yesterday doesn't show the most efficient approach for your use case. Assuming that you need to handle 800 branches in ony one database 800 Cognos Data Source Connections aren't the best way to perform data separation. 
    Why not just transferring the approach of your report into the Framework Manager model? The mapping table as well as the report view can be integrated as Query Subjects and those joined by a relationship in FM as well. Your filter [NAME] = #sq($account.defaultName)# can also be applied to the mapping table Query Subject there. 
    Alternatively, instead of the FM join-relationship, you could use a FM Parameter Mapping based on the mapping table Query Subject and a filter for the report view Query Subject like this: [BRANCH] = #$[ParameterMapping] {$account.defaultName}#


    ------------------------------
    Philipp Hornung
    ------------------------------



  • 9.  RE: Login User Based Access on Dash Board.

    Posted Thu February 25, 2021 04:40 AM
    In my first post I forgot to add that we also have a FM Parameter Mapping in place that grougs the users (in your case by branch). This mapping is used in the mentioned Data Source Macros. So we don't need a Cognos Data Source for each user but only for the user groups.

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 10.  RE: Login User Based Access on Dash Board.

    IBM Champion
    Posted Thu February 25, 2021 07:04 AM
    Dear,

    From the Cognos Administration Panel, you can set the permission rights for the Dashboard to Cognos Users apparently.

    ------------------------------
    Adnan Sheeraz
    ------------------------------



  • 11.  RE: Login User Based Access on Dash Board.

    Posted Fri February 26, 2021 03:46 AM
    Hi, 
    There are multiple ways to filter data by users. Dependend on the use case they are more or less useful or manageable. 
    a. Separate Reports/Dashboards with shared Package/Data Module and fix report filters
    b. Separate Reports/Dashboards with separate Packages/Data Modules
    c. Shared Report/Dashboard with shared Package/Data Module and dynamic allocation of database users with according model filters
    My initial suggestion goes the third way.

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 12.  RE: Login User Based Access on Dash Board.

    Posted Sun February 28, 2021 04:10 AM
    HI Philipp
                          Thanks your replies and time, How can we do it on Cognos Packages, unable to do this, your precious guidance is highly appreciated.

    ------------------------------
    Hashim Raza
    ------------------------------



  • 13.  RE: Login User Based Access on Dash Board.

    Posted Tue March 02, 2021 12:06 PM
    Hi Hashim, 
    I think following could be sufficient for your use case (no mapping of users to branches in FM model neccessary): 
    • Filters ([Branch] = {current_user}) for all relevant FM Query Subjects (in our example it's [DBUser])
    • One FM model with one Package and one Content Manager Data Source (Catalog can be left empty in FM) 
    • One Cognos Administration Data Source (like in FM) with Read & Transit for all users
    • A dedicated Data Source Connection for each branch with full rights only for users of this branch (customer in our example)
    • A dedicated Data Source Connection Login with a dedicated database user for each branch (with user_name = branch)
    • For each user only the granted Data Source Connection/Login will be used and the FM filters will filter only the rows of the according branch
    • Please test extensively :-)
    If something is still unclear please don't hesitate to ask.

    ------------------------------
    Philipp Hornung
    ------------------------------



  • 14.  RE: Login User Based Access on Dash Board.

    Posted Sun February 28, 2021 03:55 AM
    HI Adnan !
                        The main requirement is that, Log in User should see only their Branch Data, as we have about 800 Bank Branches.

    ------------------------------
    Hashim Raza
    ------------------------------



  • 15.  RE: Login User Based Access on Dash Board.

    IBM Champion
    Posted Mon March 01, 2021 03:47 AM
    Dear Hashim,

    Then you have to do a little bit more work in terms of Data Warehousing and Data Marts in order to separate the Branches Data from the Specific Users. You have to change the Data Architecture and Used to Make Relational Data Models from FM Cognos and Bind with the Report Studio. 

    1. Restrict access to members of the Cognos namespace - Depends upon the Data Modeling from the FM
    2. Remove the Everyone group from the System Administrators role
    3. Click Manage > People > Accounts
    4. Select the Cognos namespace
    5. Click the More icon  next to the System Administrators role and then click the View members icon.
    6. Click the Remove member icon  next to Everyone group and then click OK.
    7. Assign users to their predefined roles
    8. You can now assign users and groups to their predefined roles. These roles are as follows

    • Analytics Explorers
    • Analytics Users
    • Analytics Viewers
    Moreover If you still have problem then we need to re check the requirements and respond it accordingly

    BR
    Adnan Sheeraz

    ------------------------------
    Adnan Sheeraz
    ------------------------------