Hello, I am wondering, if anyone can help me?

I have installed a rootless PAW 2.1.20 on Linux Redhat 9. In PAW Administration console I can connect to Admin Server and the PA-Server. 

Nevertheless when I open the PAW URL, i just see "Applications and Plans" and "Report and Analysis" and not Administration etc..

There is no Login-Screen from the PA-Server. 

Checked the user profile in PAW, it is empty, no credentials. Seems to see only a Read-Only Welcome Screen.

Anyone experiencing the same issue and can help?

Additional Information: we are in a very restricted environment. IP-Adresses are not allowed, only FQDN. But all relevant ports are open.

Thanks a lot,

Andreas

------------------------------
Andreas Schuster
------------------------------

"Nevertheless when I open the PAW URL, i just see "Applications and Plans" and "Report and Analysis" and not Administration etc.."

What PAW role does your PAW user have ?
The role of Consumer or Analyst ?
Or the role of Modeler or Administrator ?

You need the role of Administrator to see the tiles "Administration" and "Data and Models".

If your PAW user does not see the tiles "Administration" and "Data and Models" I think it has the role of Consumer or Analyst. It does not have the role of Administrator.

The product documentation outlines a method to grant a PAW user the role of Administrator by executing Docker (on Windows) or Podman (on Linux) commands:

https://www.ibm.com/docs/en/planning-analytics/2.1.0?topic=users-promote-user-administrator-local-only
Promote a user to administrator (Local only)
If your IBM Planning Analytics Workspace administrator is no longer available, you can promote a non-admin user to the administrator role by using the command line.  

------------------------------
Bernd Siebert
------------------------------

Hello Bernd, many thanks for your reply. I was on vacation, hence my late response.

It seems I do not have any users available in PAW - there is no way to log in with an administrator, and findLoggedInAtleastOnceUsers doesn't show any users either. So it appears the initialisation failed.

Any ideas? Can I add a new user as admin? Why isn't this done during the initialisation process?

Thanks,
Andreas

------------------------------
Andreas Schuster
------------------------------

Original Message:
Sent: Wed June 17, 2026 03:44 AM
From: Bernd Siebert
Subject: No Login-Screen when installing PAW 2.1.20 (Linux)

"Nevertheless when I open the PAW URL, i just see "Applications and Plans" and "Report and Analysis" and not Administration etc.."

What PAW role does your PAW user have ?
The role of Consumer or Analyst ?
Or the role of Modeler or Administrator ?

You need the role of Administrator to see the tiles "Administration" and "Data and Models".

If your PAW user does not see the tiles "Administration" and "Data and Models" I think it has the role of Consumer or Analyst. It does not have the role of Administrator.

The product documentation outlines a method to grant a PAW user the role of Administrator by executing Docker (on Windows) or Podman (on Linux) commands:

https://www.ibm.com/docs/en/planning-analytics/2.1.0?topic=users-promote-user-administrator-local-only
Promote a user to administrator (Local only)
If your IBM Planning Analytics Workspace administrator is no longer available, you can promote a non-admin user to the administrator role by using the command line.  

------------------------------
Bernd Siebert
------------------------------

No Login-Screen in PAW 2.1.20 (Linux)

Andreas, the behavior you describe - seeing only Applications and Plans and Report and Analysis tiles without Administration or Data and Models - indicates that no Administrator role has been assigned in your PAW environment. Since you also mention that findLoggedInAtleastOnceUsers returns empty, it strongly suggests that the initial user provisioning did not complete successfully during installation.

Here are the steps to resolve:

1.      Verify Initialization Logs

o    Check the PAW installation logs under /paw/logs or /var/paw/logs.

o    Look for errors during the initialization phase, especially around user creation and role assignment.

2.      Confirm Identity Provider Setup

o    In restricted environments (FQDN-only, no IPs), ensure that the identity provider (CAM/LDAP/SSO) is correctly configured.

o    If PAW cannot reach the identity provider, no users will be created.

3. Promote a User to Administrator

o    Use Podman (Linux equivalent of Docker) to promote a user manually:
bash
podman exec -it paw_container_name \
  /bin/bash -c "node /usr/paw/scripts/promoteAdmin.js <username>"

o    Replace <username> with the FQDN-based user ID that should be the administrator.

o    This script is documented in IBM's guide: Promote a user to administrator (Local only).

4.      Check User Directory Integration

o    If no users are available, confirm that PAW is correctly integrated with your TM1/Planning Analytics server's security model.

o    Ensure that the Admin Server is reachable via FQDN and that the ports (typically 9510, 9511, 9512) are open.

5.      Re-run Initialization if Needed

o    If logs confirm initialization failure, you may need to re-run the PAW setup script with proper environment variables (FQDNs instead of IPs).

o    Ensure that the environment variables PAW_ADMIN_USER and PAW_ADMIN_PASSWORD are set during initialization.

💡 Tip: In highly restricted environments, initialization often fails silently if FQDN resolution or SSL certificates are misconfigured. Double-check DNS and certificates before re-running setup.

 

------------------------------
Saif Ali Sabri
erp.sap@hotmail.com
eBiz Portal
FAISALABAD - Pakistan
------------------------------

Hello, and thank you very much for the detailed information. I will review and go over your points and then get back to you. Best regards, Andreas

------------------------------
Andreas Schuster
------------------------------

Original Message:
Sent: Tue June 23, 2026 06:40 AM
From: Saif Sabri
Subject: No Login-Screen when installing PAW 2.1.20 (Linux)

No Login-Screen in PAW 2.1.20 (Linux)

Andreas, the behavior you describe - seeing only Applications and Plans and Report and Analysis tiles without Administration or Data and Models - indicates that no Administrator role has been assigned in your PAW environment. Since you also mention that findLoggedInAtleastOnceUsers returns empty, it strongly suggests that the initial user provisioning did not complete successfully during installation.

Here are the steps to resolve:

1.      Verify Initialization Logs

o    Check the PAW installation logs under /paw/logs or /var/paw/logs.

o    Look for errors during the initialization phase, especially around user creation and role assignment.

2.      Confirm Identity Provider Setup

o    In restricted environments (FQDN-only, no IPs), ensure that the identity provider (CAM/LDAP/SSO) is correctly configured.

o    If PAW cannot reach the identity provider, no users will be created.

3. Promote a User to Administrator

o    Use Podman (Linux equivalent of Docker) to promote a user manually:
bash
podman exec -it paw_container_name \
  /bin/bash -c "node /usr/paw/scripts/promoteAdmin.js <username>"

o    Replace <username> with the FQDN-based user ID that should be the administrator.

o    This script is documented in IBM's guide: Promote a user to administrator (Local only).

4.      Check User Directory Integration

o    If no users are available, confirm that PAW is correctly integrated with your TM1/Planning Analytics server's security model.

o    Ensure that the Admin Server is reachable via FQDN and that the ports (typically 9510, 9511, 9512) are open.

5.      Re-run Initialization if Needed

o    If logs confirm initialization failure, you may need to re-run the PAW setup script with proper environment variables (FQDNs instead of IPs).

o    Ensure that the environment variables PAW_ADMIN_USER and PAW_ADMIN_PASSWORD are set during initialization.

💡 Tip: In highly restricted environments, initialization often fails silently if FQDN resolution or SSL certificates are misconfigured. Double-check DNS and certificates before re-running setup.

 

------------------------------
Saif Ali Sabri
erp.sap@hotmail.com
eBiz Portal
FAISALABAD - Pakistan
------------------------------