Planning Analytics

Planning Analytics

Get AI-infused integrated business planning

 View Only

  • 1.  When are TM1 Groups coming to PAW?

    Posted Tue February 09, 2021 11:42 AM

    Especially now that applications and plans are secured by group we need to have integration with TM1 server groups.  Unless I have missed something there is no way to automate an upload of TM1 groups to PAW.  With thousands of users its near impossible to keep this synced unless I make it someone's job to upload the group mapping file every couple of hours, every day during our budget and forecast cycles.

     

    Its a borderline show stopper for moving to the new PAW front end along with a few other things like performance that I'm hoping will get resolved in the next release or so.

     

     

     

     


    #PlanningAnalyticswithWatson


  • 2.  RE: When are TM1 Groups coming to PAW?

    Posted Tue February 09, 2021 03:49 PM
    I agree and also there is no way to import CAM via PAW, which only can be done in Perspectives still if under security mode 5.

    ------------------------------
    mvp morgan
    ------------------------------

    Original Message


  • 3.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 06:42 AM
    Hi Robby,

    The current plan is to support Planning Analytics Workspace groups in the TM1 databases.  In the groups management interface in Workspace (Planning Analytics Administration) you will be able to select which TM1 databases each Workspace group should be represented in.  Workspace will push the group and the members of the group to the selected TM1 database.  As members are added or removed from the Workspace group the same group in the TM1 database will be kept in sync.  This change will give Planning Analytics administrators a single place to manage groups for both Workspace and TM1 databases.  

    We also want to improve how groups make their way into Workspace.  For Planning Analytics on IBM Cloud this means syncing groups in Workspace with groups in the our customers authentication sources.  In the Cloud Pak for Data environment it means using the Cloud Pak for Data groups in Workspace.  For Planning Analytics local we want to support automation around the users and groups upload from flat file or maybe an API endpoint for group management in Workspace.

    In regards to Morgan's comment below, I can confirm we are not planning enhancements specific to Cognos Analytics groups in Planning Analytics Workspace.  I do not think we will ever have an option to import a group from Cognos into Planning Analytics Workspace (like you might import a Cognos group into TM1 with Architect/Perspectives).  We want to remove the Planning Analytics dependency on Cognos Analytics for authentication while supporting a common authentication in both products.  



    ------------------------------
    Stuart King
    IBM Planning Analytics Offering Manager
    ------------------------------

    Original Message


  • 4.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 11:03 AM

    Just to be clear.  I need to be able to use my TM1 database groups to secure PAW objects like applications and plans.  The reason here is that we have a lot of automated security processes that put people in various groups to secure them against sets of objects/models.  It's the automations I'm really trying to use in order to keep any manual PAW group intervention from happening.

     

     

     

     

     

     




    Original Message


  • 5.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 11:32 AM
    This seems backwards. At this point paw groups are not really being used (when compared to tm1 groups), why push the lesser used group versus pull the group that in many cases has already been built out? I wouldn't wand to "pollute" my dB with content from one of my UIs.  

    Sent from my mobile phone



    Original Message


  • 6.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 12:59 PM
    It might seem a bit backwards.   Allow me to explain the broader requirements around user management and our thinking on this topic.

    Requirements:

    1 - A single UI to manage groups for the whole Planning Analytics environment.  This includes both Workspace and TM1 databases (plural).  It's typical to have one instance of Workspace connected to multiple TM1 databases.

    2 - We want a solution that is not based on Cognos (CAM) authentication.  Future versions of TM1 Server will allow us to break the dependency between TM1, Planning Analytics Workspce, and Cognos Analytics for authentication while still supporting a common user in both products.

    3 - The group members definition typically does not start in the TM1 Server or Planning Analytics.  We don't want to force unnecessary group management in any Planning Analytics component.  I realize this is not the case for all of our customers.

    We understand that user and group management in TM1 is often automated in TM1 databases through TI processes.  We are not going to remove that capability of TM1.  Longer term, I think that APIs for automation of user management in Workspace will be required.

    Ryan - I also want to clarify that we are not planning on polluting TM1 databases with content from Planning Analytics Workspace.  The groups that PAW will create and update in the TM1 database are really just TM1 groups.  We are only using PAW as an interface to define and manage groups.
    ​
    Open to additional discussion.

    ------------------------------
    Stuart King
    IBM Planning Analytics Offering Manager
    ------------------------------

    Original Message


  • 7.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 01:13 PM

    Selfishly ��

     

    Are you confirming we can either use TM1 database groups to secure PAW objects in the future?  Or, we can manipulate PAW groups using TI processes?

     

    Either way we need to be able to manipulate users to group relationships through automation and use those groups in PAW.

     

     

     

     




    Original Message


  • 8.  RE: When are TM1 Groups coming to PAW?

    Posted Wed February 10, 2021 01:29 PM
    Robby - Some sort of API call to Workspace to do the following:  add users, remove users, add groups, remove groups, change group members, change roles and other group based properties.  Automation with TI processes would really depend on the TI processes ability to make an API call.  Using an ExecuteCommand like TI function to make API calls to web services would probably make sense.


    ------------------------------
    Stuart King
    IBM Planning Analytics Offering Manager
    ------------------------------

    Original Message


  • 9.  RE: When are TM1 Groups coming to PAW?

    Posted Thu February 11, 2021 10:17 AM
    Hi Stuart,

    I'm in full support of having one place to manage users and groups, as the approach at the moment is confusing to customers. Not only do they have to manage the TM1 database user/groups, but also wait for the user to login to PAW and then manage which PAW groups they go into (as least that is how it works in local mode). 

    We have a number of customers who manage their TM1 User/Groups based on text file extracts (even SQL tables) that they get direct from the AD server. The, using TI processes, they can then automate user/group creation and all they have to do is manage the AD accounts through IT business processes. As long as PAW User/Groups can be managed through TI in a similar way, then I am all for this approach otherwise it could cause a few headaches for existing customers who have a process already in place for managing security.

    Thanks
    Ian

    ------------------------------
    Ian Moy
    ------------------------------

    Original Message