I am trying to restrict a group of users from being able to run reports with custom SQL queries. To test, I took a group my user was a part of and denied all permissions related to the Run User Defined SQL capability under Report Studio. 'Deny' is suppose to override an 'Allow', but it is still allowing me to run a report I created that includes a custom SQL query. I am also able to create new reports with custom SQL. When I failed to see any changes, I added my user directly from the active directory and denied all permission. There was still no change and I am still able to run these reports. 

Is there any additional steps that need to be taken for these changes to take effect? I already tried restarting the Cognos service. 

Thanks, 

Is your user a member of the System Administrators role (or the Analytics Administrator role)? If so, your Admin privileges will give your user access to see and do everything, regardless of what other security restrictions you impose.

Cheers!
MF.

I am trying to restrict a group of users from being able to run reports with custom SQL queries. To test, I took a group my user was a part of and denied all permissions related to the Run User Defined SQL capability under Report Studio. 'Deny' is suppose to override an 'Allow', but it is still allowing me to run a report I created that includes a custom SQL query. I am also able to create new reports with custom SQL. When I failed to see any changes, I added my user directly from the active directory and denied all permission. There was still no change and I am still able to run these reports. 

Is there any additional steps that need to be taken for these changes to take effect? I already tried restarting the Cognos service. 

Thanks,