If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

Impact of security group renaming

Started by greg51, 19 Sep 2012 02:11:01 AM

Previous topic - Next topic

greg51

Hello everybody, we need to rename active directory security groups but these groups are used to handle security in cognos 8.4.1

We ran some tests and it looks like if a windows security group nested in a cognos security group is renamed, the changes are replicated, you can see the changes in the administration security.

But if a test use, member of a test group had the right to see and execute a report, once the security group renamed, he can't see it anymore.

Can't find anything about group renaming in the official guides, does anyone know how this is handeled, does it need a restart of cognos,  does it need to apply thhe rights again....?

Grim

Get that test user to renew his credentials and test again.
"Honorary Master of IBM Links"- MFGF
Certified IBM C8 & C10 Admin, Gamer, Geek and all around nice guy.
<-Applaud if my rant helped! 8)

greg51

Hi grimm, thanks for your suggestion.

I've tried what you suggested but same result, I don't see anymore a report tha I was able to see before the renaming of the A.D group. Even after a logoff/login.  :-\

I can see it again if I re-apply the security settings on the report or the folder containing the report.

But, correct me if I'm wrong, even if it had worked, it cannot be a satisfying solution as long as you have a lot of renaming to do and a lot of different kind af granted rights:
Exemple : My system admin will rename the group GR_MARKET in GR_MARKETING. Then all the users members of this group won't see anymore the reports restricted to this group right? So I would have to re-apply all the security on all the concerned folders?

I'm starting to wonder if it's relatde to the fact that we use A.D group to give access, maybe it would be better to use a cognos group with A.D groups in it.

I'll try this but that would not be a good surprise, that would mean a lot of changes.

Anyway thanks for your help.