Original Message:
Sent: Wed July 19, 2023 03:35 AM
From: Chris Hewitt
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Thanks George! Assume you are using "AssignClientPassword"? Will this allow "regular" users to only change their own passwords? I suppose I could the "TM1User" function to ensure this, and have a separate process for admins to select any user to change. For user groups, sounds like I would always need to use to Ti to manage if I wanted to avoid Architect.
Appreciate your help.
------------------------------
Chris Hewitt
Original Message:
Sent: Wed July 19, 2023 03:20 AM
From: George Tonkin
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Did you have the Security Access flag ticked on the process?
Tried it quickly on my side and "seems" fine once Security Access is ticked and process has Read access for the user's group(s)
------------------------------
George Tonkin
Business Partner
MCI Consultants
Johannesburg
Original Message:
Sent: Wed July 19, 2023 03:14 AM
From: Chris Hewitt
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Hi George
Thanks - that is something I have considered. But then users will not be able to change password themselves (I tried it out). They need to have security admin rights. The other option is Tm1Web, which we can maybe use for the sole purpose of changing passwords. Also what is your take on adding/managing groups. Seems like you can only do so in Architect..?
Regards
Chris
------------------------------
Chris Hewitt
Original Message:
Sent: Wed July 19, 2023 03:10 AM
From: George Tonkin
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Why not have an Action Button call a process to prompt for a password and assign to the TM1User?
Have not tested but throwing it out there...
------------------------------
George Tonkin
Business Partner
MCI Consultants
Johannesburg
Original Message:
Sent: Wed July 19, 2023 03:08 AM
From: Chris Hewitt
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Hi Paul
So does this mean that if you do not have CAM configured, the only way to manage users (set them up, change passwords etc) is to remote onto the server itself and use Perspectives/Architect? The other issue I have noticed, is that when I set up a new Group in PAW (e.g. Country1_Users), is does not appear in the list of groups that I see when I want to assign users to groups. The only thing I have visible are the groups that where set up in Architect (prior to the migration). So even if CAM were used, how would I create new groups without doing so in Architect?
Many thx
Chris
------------------------------
Chris Hewitt
Original Message:
Sent: Wed July 19, 2023 02:47 AM
From: Paul Coggan
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Hi Chris
There is no PAW specific user ID and password. When PAW is configured to use TM1 security it uses the password of the TM1 database that is entered into the bottom field on the PAW Admin Tool configuration page. If you have multiple TM1 databases then it is necessary to synchronise the password for all databases for each user or PAW will prompt for credentials as the user connects to each database.
This is improved if you use CAM security as you can have the user authenticate with their windows ID and not have to manage the password synchronisation or credential re-entry.
Regards
Paul Coggan
Original Message:
Sent: 7/18/2023 8:46:00 AM
From: Chris Hewitt
Subject: Pafe & Paw - Setting up/Changing Password with IntergratedSecurity=1
Hi Guys
We have a client who use native (integratedsecurity=1) security and are migrating away from Perspective/Architect (on Prem) to Pafe/PAW (hosted on Private Cloud).
Maintaining user password seem to be a problem. In PAW, once you have imported a new user, how do you assign an "initial" password. Even more importantly, in either of Pafe/PAW, how does a user change their password? We can't seem to find a way to do this, which seems really bizarre. This is supported in Perspectives & also in PASS (Tm1Web). Am I missing something?
Regards
Chris
------------------------------
Chris Hewitt
------------------------------