As others have noted, setting the RUN permissions will achieve your goal of restricting their 'moving/deleting' the reports. However, if possible you should set that at the folder level, so that security maintenance is easier, rather than at the report level. Also, I'm not sure if you only have report consumers or if you also have report authors. We have both, and for those reports that we manage internally as a Cognos team, we generally do not want the authors to obtain a copy (coping to their My Content) and then modifying them and running as they see fit. Our internal reports are built off of complex packages that the users do not understand and they can build runaway queries unintentionally. So, we try to keep that managed for only the reports where it's appropriate for them to do so. Restricting the authors from copying is easily done by simply always publishing a view of the report into Team Content folder and not the actual base report. The base report resides in a hidden folder to which they have the Run permission on as well. This also make the report deployments easier as well when we make changes from dev to prod. There are other things to consider in environments where you have thousands of reports and managed packages/data modules for author access vs internal cognos developer access. Still, Cognos does a great job for the most part in offering the correct set of permissions/capabilities to keep this all manageable. Although, it does require some design work upfront to enable it all correctly. Hope this helps.
Original Message:
Sent: Fri October 04, 2024 10:01 AM
From: Blaine Pinch
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Thanks so much for that.
I'll let you know if I run into any issues.
------------------------------
Blaine Pinch
Original Message:
Sent: Fri October 04, 2024 09:26 AM
From: Robert Dostal
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Hi Blaine,
to save/export a report as Excel file the "Run" permission is sufficient. In this case none of the users can modify or delete the report but still maintain the capability to run it as HTML, Excel, PDF or any other format that you or the admin has allowed.
------------------------------
Robert Dostal
Team Leader BI
GEMÜ Gebr. Müller Apparatebau GmbH & Co. KG
Ingelfingen
Original Message:
Sent: Fri October 04, 2024 09:16 AM
From: Blaine Pinch
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Thanks everyone for your guidance.
Just to clarify, I'm using 11.2.4.
I wanted to clarify my understanding regarding report permissions. If I don't want users with general edit rights to delete or modify a report, would I also need to prevent them from saving the report as an Excel file to their system?
Is there no way to allow users to generate and export reports as Excel files, while still restricting their ability to delete or modify the original report?
It seems challenging to manage an organization with over 1,000 users, relying solely on the assumption that none of them would delete or change a report unless we restrict their ability to export report data outside the system. Am I interpreting this correctly?
thanks
------------------------------
Blaine Pinch
Original Message:
Sent: Fri October 04, 2024 08:52 AM
From: Robert Dostal
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Hi Amy,
as far as I know: Yes. You would need the "WRITE" permission to be able to save outputs. The same permission also allows to delete the report. It is possible to set permissions on each object. We use the creation of report views in another folder for users so the original report stays untouched.
------------------------------
Robert Dostal
Team Leader BI
GEMÜ Gebr. Müller Apparatebau GmbH & Co. KG
Ingelfingen
Original Message:
Sent: Fri October 04, 2024 08:46 AM
From: Amy Rivito
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
With the setting of Run, this won't allow them to save the output here, correct?
------------------------------
Amy Rivito
Original Message:
Sent: Fri October 04, 2024 02:38 AM
From: René Kent Nielsen
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Hi
Under the properties for the report, there is a tab called permissions, change the permission for the user to "Run report", that will only allow them to run the report.
Br
------------------------------
René Kent Nielsen
Brand manager
CogniTech A/S
Herning
61932074
Original Message:
Sent: Thu October 03, 2024 09:31 AM
From: Blaine Pinch
Subject: Restrict users to Running Reports (or at least not allowing deletion of reports)
Hi all,
I an having an issue with users "unintentionally" deleting or moving reports (to there own folders) so they are no longer accessible to all others.
I would love to make it so users can only run reports, failing that, I would at least make it so they cannot delete (or maybe modify) reports.
How can this be done?
------------------------------
Blaine Pinch
------------------------------