Cognos Analytics

Cognos Analytics

Connect, learn, and share with thousands of IBM Cognos Analytics users! 


#Product
#Analytics
#CognosAnalytics
#Analyticstools
#TechXchange Partner
#TechXchange Session
#TechXchange Presenter
#AI
 View Only
  • 1.  Cognos User Role & Profile

    Posted 06/24/24 07:40 AM

    Hello Champions,

    I have specific users in Cognos and want to give them access to only one report. The other folders should not be visible to them on login. How we can define that role in the group.

    Thanks



    ------------------------------
    Anas Ghayas
    ------------------------------


  • 2.  RE: Cognos User Role & Profile

    Posted 06/26/24 11:53 AM

    i do not think that it is possible to hide reports or folders in team content. you can protect reports from getting modified, not sure about protecting reports from execution. i have this internal doc. it is not exactly what you want but it might give you some ideas. 

    Objective

    In some cases, it is necessary to secure specific reports to prevent unauthorized users from modifying them. Rather than manage permissions for individual users/reports, Cognos allows administrators to create a folder under Team Content and grant privileges to predefined user groups (Cognos and/or Active Directory).

    The document outlines how to create a Protected Folder for storing reports that should only be managed by authorized personnel.

    nitial Setup

    1.       Create a Cognos group named ProtectedReportAdmin

    2.       Create a folder in Team Content named Protected Reports

    3.       Remove all permissions from the Protected Reports folder except for the following:

    BIProtectedReportAdmin

    Full

    Report Administrators

    Full

    Granting access to Protected Reports

    To grant users access to the Protected Reports folder, simply add them to the BIProtectedReportAdmin Cognos group. 



    ------------------------------
    brenda grossnickle
    BI Programmer Analyst
    FIS
    ------------------------------



  • 3.  RE: Cognos User Role & Profile

    Posted 06/26/24 12:47 PM

    Hi Anas, You can hide the report folders and remove the capability to see hidden objects for the user role. You can create a report view (or maybe even a report shortcut) in a non-hidden folder for those users. If you have several groups of users with different reports then you could create more of such folders and give different access rights to those folders. 



    ------------------------------
    Philipp Hornung
    Business Intelligence Manager
    Techniker Krankenkasse
    Hamburg Germany
    #IBMChampion
    ------------------------------



  • 4.  RE: Cognos User Role & Profile

    Posted 06/27/24 03:22 AM

    Hi Philipp,

    Appreciate your response.

    I have created a folder for these users and moved the report under the folder. I have made a group for these users as well but could not find a way to hide the folders from the Feature / Capabilities. When we create a user, it becomes a master user and appears in all roles like Administrator, everyone, etc. I would be grateful to you if could help on this.

    Thank you



    ------------------------------
    Anas Ghayas
    ------------------------------



  • 5.  RE: Cognos User Role & Profile

    Posted 06/27/24 03:37 AM

    Hi Anas,

    did you check the Everyone group? If the system is set up initially this group is member of other groups so everyone is system admin to refine security. You would have to define your own system admins and the remove "Everyone" from all roles and groups within the Cognos namespace. This is a critical step to achieve license compliance with IBM!

    If that is done, you can follow the guide from @Philipp Hornung. Remove the "Hide entries" capability from the desired roles and mark the folder/report as hidden. that's exactly how I do it in my Cognos systems to prevent regular users from seeing "system objects" but developers are able to see them.

    This is how it looks in my system: Only the Full-Access role and BI Developers have this capability.

    Then hide the corresponding elements in Team content:

    If you need a more detailed control over which element is visible to which user (group) I highly suggest to set up a security concept with multiple roles and groups. Roles control the capabilities you have with your role. Which functions you can use within the system.

    Groups should control to which data & objects the user has access to. This is also done on the properties of element within the Team content:

    To set different security settings, you would have to check "Override parent permissions" to be able to add/remove groups.



    ------------------------------
    Robert Dostal
    Team Leader BI
    GEMÜ Gebr. Müller Apparatebau GmbH & Co. KG
    Ingelfingen
    ------------------------------



  • 6.  RE: Cognos User Role & Profile

    Posted 06/27/24 03:43 AM

    BTW: groups and roles are created in Manage -> People -> Accounts -> Cognos (or you use groups from your security provider like LDAP or NTLM)



    ------------------------------
    Robert Dostal
    Team Leader BI
    GEMÜ Gebr. Müller Apparatebau GmbH & Co. KG
    Ingelfingen
    ------------------------------



  • 7.  RE: Cognos User Role & Profile

    Posted 06/27/24 03:36 AM
    Edited by Anas Ghayas 06/27/24 03:37 AM

    Hi Brenda,

    I believe it is a doable thing but I am a step short to manage it. This is an important component for the organization to hide their sensitive data from every login user (Vendors / Externals) and I am sure Cognos must have this capability for competition.

    I appreciate your attention.

    Thanks & Regards,



    ------------------------------
    Anas Ghayas
    ------------------------------