Cognos Analytics

Cognos Analytics

Connect, learn, and share with thousands of IBM Cognos Analytics users! 

 View Only
  • 1.  IBM Cognos 11.0.13 Security Groups on Data module

    Posted Fri October 27, 2023 11:30 AM

    Hello everyone, I have performed data modeling using IBM Cognos 11.0.13 with data modules. Now, I would like to restrict the data that a user views when querying data modules based on the group they belong to, using a 'security filter' feature. For example, if group A is allowed to see the contents of a table with types X and Y, and a user is a part of this group, they should only see data of types X and Y (and not Z and W). Is it possible to achieve such a result using the data modules in Cognos 11.0.13? Is there a workaround? Thank you



    ------------------------------
    Francesco Lastrino
    ------------------------------


  • 2.  RE: IBM Cognos 11.0.13 Security Groups on Data module

    Posted Fri October 27, 2023 02:14 PM

    Hi,

    You may achieve this using Cognos macros and filtering data in data modules.

    Security filter provided by data source connections is not to easy to set for dozens of groups and can be missed if clean and reload metadata of data source.



    ------------------------------
    JEAM COELHO
    Cognos Solution Architect

    LinkedIn: https://www.linkedin.com/in/jeamcoelho/
    ------------------------------



  • 3.  RE: IBM Cognos 11.0.13 Security Groups on Data module

    Posted Mon October 30, 2023 04:24 AM

    Hi,

    Thank you for the response. The macros you're talking about, should they be applied to individual reports that query that source, or is there a way for me to write the macro within a data module?



    ------------------------------
    Francesco Lastrino
    ------------------------------



  • 4.  RE: IBM Cognos 11.0.13 Security Groups on Data module

    Posted Mon October 30, 2023 04:28 AM

    Hi,

    Thank you for the response. The macros you're talking about, should they be applied to individual reports that query that source, or is there a way for me to write the macro within a data module?



    ------------------------------
    Francesco Lastrino
    ------------------------------



  • 5.  RE: IBM Cognos 11.0.13 Security Groups on Data module

    Posted Tue October 31, 2023 04:16 AM

    You're on quite an old version of Cognos Analytics - I think data module based security came in version 11.1. Which means your security options are very limited. 

    As mentioned you could try and create filters on your queries within the data module using Cognos Macros.

    However, if you go down this road then beware! You are securing the data within that data module - not the underlying source. You have a security hole that anyone who has access to the data module tool could just create their own data module on the source tables. This would bypass all the security you have put within your DM.

    You would need to limit access to the Data Module tool to prevent this. Which may have a bigger impact on users as they can no longer create their own data modules.



    ------------------------------
    Marc Reed
    ------------------------------



  • 6.  RE: IBM Cognos 11.0.13 Security Groups on Data module

    Posted Thu November 02, 2023 03:45 AM

    If you have security based on single tables inside a data module, you could also think of separating the tables in different data modules, put your security on those and collect these (base) data modules in a second level of a (report) data module. That could make your setup more transparent, depending on your use case.



    ------------------------------
    Philipp Hornung
    Business Intelligence Manager
    Techniker Krankenkasse
    Hamburg Germany
    #IBMChampion
    ------------------------------