Planning Analytics

 View Only

 How to replicate permissions between namespaces

Scott Huffman's profile image
Scott Huffman posted Tue June 02, 2026 11:54 AM

Hello everyone. 

Setup:

My employer is still using Planning Analytics 2.0 Local.  I know, I know....

It is using CAM for authentication and has many Groups mirroring active directory groups with permissions assigned.

We have now created a new namespace in Cognos for MFA and created matching groups in each database with the new CAM ID(s).

Every AD user and every AD group get a new CAM ID when created as a result of logging in with a new Cognos namespace.

For example: if there is an "AD" namespace and we create an "MFA" namespace for login purposes John Doe might have the following CAM ID's in planning analytics once he has logged in with both namespaces:

  • AD:u:abcdefg
  • MFA:u:pqrestu

If John Doe is a member of an AD Group called "GRAND_POOHBAHS" planning analytics might have entries like the following:

  • AD:g:13570a
  • MFA:g:x7c5v4b

Question:

Is there a handy dandy TI script for copying the permissions from an existing namespace to the new namespace for groups and individual users across all of the objects that store permissions?

I'm not quite familiar enough with TM1 to know all of the objects where permissions are set. 

Thank you for any guidance you can provide.