Cognos series 7 version 2 Access Manager Administration

[gshilpa24]

Hi Folks,
One Major Issue with adding users.

we use Access Manager as a Namespace in Cognos Configuration - the type is 'Cognos Series 7'.

Then in the web configuration we have added as a directory which will automatically include all your users and user classes from Access Manager.

Earlier we had a an automated script to add users (Basically Employees and Managers). Now that the script is not working, we used to add users manually in access manager and then in the cognos connection create a profile for that user.

Now what;s happening is, we are trying to add one user as Manager in the users and in the Root user class. when we add him , and then in the cognos connection, we create his profile, his profile gets created but when he logs into the report,
he gets an error.

QE-DEF-2088 Unable to find the database 'hr' in the content store.

DPR-ERR- 2082. an error has occured. please contact your system administartor.
Checked his premissions and everything seems fine. even datasource and signon permissions are there for him.

But still this issue remains.

Can anybody help me with the procedure to give him access in access manager and then in cognos connection what needs to be done?

or any working script which automates the users into two categories, employee and manager?

please advise.

Thanks

[cognoslearner1]

Please check the permissions again i feel its a permission issue.
Check whether the user has acces to the report and the package to which it is pointing.

[gshilpa24]

check the permissions for report and package... Employees have the permissions

[cognoslearner1]

Ensure the  Traverse privilege is in place for users (group/roles) for Report Studio capability, and that they have execute and traverse privileges on the "HTML Items in Report" sub-capability.  If this is removed, users cannot run reports containing HTML items.

Solution
IBM Cognos 8.3 or higher:

Steps:
1) Login to IBM Cognos 8 as a user with System Administration privileges.
2) From the "Launch" menu, click "IBM Cognos Administration"
3) Click the "Security" tab.
4) Click "Capabilities"
5) For "Report Studio" capability, click the Actions triangle and choose "Set Properties". Then click the "Permissions" tab.
6) Add the Traverse permission for the approriate users/roles/groups. Save changes to return to the "Capabilities" Page.
7) Click on "Report Studio" link to view the list of sub-capabilities
For "HTML Items in Report", click the "Actions" triangle and choose "Set Properties". Then click the "Permissions" tab. If necessary, click the box to override the access permissions acquired from the parent entry.
9) Add the Execute and Traverse permission for the appropriate users/roles/groups.
10) Save changes to return to the Capabilities Page.

[gshilpa24]

Hi,

Thank You for the response.

The Employees group already have the permissions which you have mentioned. i checked the same now.
Initially we had an automated script to add users. Now from past few months, the script doesnt work . Nt sure why.
So we started adding manually the users in access manager. when we add, it adds there for that partiular emp.
when we check in cognos connection under employee group he is present, but when he clicks on the application to access the report he gets the error.

[cognoslearner1]

Hmmm... then absolutely no idea  :( . Please let me know once the issue is resolved.

[gshilpa24]

Sure ; i shall post if this issue gets resolved .  I am trying to figure out the same from past 2 days still cudn't  :(

[MFGF]

Hi,

Have you checked the permissions defined on the data source 'hr'? The error message seems to indicate that this is the root cause of the issue. When you look at data sources in the Admin Console, there are three levels to each. The top level is the logical data source name, next level down is the physical connection, and the bottom level is the data source signon. I would go into the properties at each of these three levels and make sure that your users/groups/roles have permissions defined (or that the 'everyone' group has permissions). Let us know what you find...

MF.

[gshilpa24]

Thank You for the response.

I checked for the 3 connections MFGF . Datasource, connection and signon. And Employees group have the permissions (read,execute,traverse) .

i am not sure what is causing this issue :(

[prikala]

Your namespace data in ldap might be corrupt, see this:
http://www-01.ibm.com/support/docview.wss?uid=swg21350230
(no idea where to get the patch these days. In 2007 cognos support fixed my clients namespace that was corrupt (send them bad namespace as lae, get back fixed lae). Not sure if they still do that).
Symptoms were: Everything seems to be all right when user and his userclasses are inspected in Access manager. Cognos8 acts as if user does is not a member of some userclass even when he/she has been added to that particular userclass in accessmanager.
We hit the bug when removing users using Access Manager Batch maintenance.

[gshilpa24]

Thank you for the response.

Oops! if this is the issue then we i'm in trouble... It's prod server and users are raising issues daily...  :(  :(

[gshilpa24]

Folks,

The issue is resolved. Indentified that, when we add the users manually in access manager, we need to add them to the group employee in the BI. Manually go there and add. It works fine. Finally this got resolved.  :)