Cognos BI 10.2, Security Questions

[gdunster]

We just installed Cognos BI, version 10.2 and have it up in production as of yesterday.  I am having problems with the securtiy, in that I have a list of clients as Professional Authors and within that group, two people see and use Report Studio just fine but three others can not even get to Report Studio. 

I have Capabilities and Report Studio, I have Professional Author authorized with read, write, execute and travers.  All people are set up the same.  If I give the person Admin rights they can see and use Report Studio but not under Professional Author or Author.   Anyone have experience or thoughts on this????

Thanks, Garry

[gdunster]

We found the problem, the clients with access to Report Studio were also under the group Report Administrators.  The clients without Report Studio access were not included in the Report Admin group.  By adding the Professional authors rolls to the Report Administrator role everyone now has Report Studio access.   Interesting!!!

[MFGF]

We found the problem, the clients with access to Report Studio were also under the group Report Administrators.  The clients without Report Studio access were not included in the Report Admin group.  By adding the Professional authors rolls to the Report Administrator role everyone now has Report Studio access.   Interesting!!!

It's quite possible you are breaking your license terms by doing this. Are the users in question licensed as Report Administrators? Should they have all these capabilities?

My guess is that you have missed a key step somewhere. You mentioned the Report Studio capability in Capabilities, but nothing about setting the users/group/role up in User Interface Profiles (Admin Console > Security tab > User Interface Profiles). You will need to grant Exewcute and Traverse to both the Professional and Express profile.

MF.

[gdunster]

to answer your questions, yes, the report authors are licensed as professional authors.
I did take your suggestion and went into the Admin Console>Security tab > User Interface Profiles and added the Professional Author group to both the Express profile and the Professional.  I removed the Professional Authors group from the Report Administrator group and had the clients test for Report Studio.  The suggestion you gave did not make a difference.  They did not have Report studio access.  I added the Professional Authors group back to Report Administrators group and Report Studio now show up again.

thank you for your recomendation.  I was not ware of User Interface Profiles but will now be.
thanks, Garry

[MFGF]

It's good that this gives you a short-term fix, but adding any non-admin user to the Report Administrator's role is a breach of your license terms. If you get audited by IBM they will be pretty hash if they find this kind of practice has been going on. My advice is to check each step and figure out what has been missed in allocating Report Studio capabilities to the Professional Author role.

Cheers!

MF.