COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: bstn82 on 15 Mar 2018 10:53:03 AM

Title: C11.0.9: Manage License is incorrectly reporting users as Admins
Post by: bstn82 on 15 Mar 2018 10:53:03 AM
Hi All,

I do have a case opened with IBM and they confirmed the issue that I am having. They will continue their investigation, but I thought I shared this issue with the community to learn if anyone else if having this issue.

Issue: Members of the "Analytics Users" group are showing up as "Analytics Administrators" in the Manage License screen. Step to re-produce the issue are below.

Steps to reproduce:
-Start 11.0.9 against a blank SQL server content store database
-Made myself a member of the Analytics Administrator group
-Removed Everyone a member of the Analytics Administrator group and all other groups
-Added a test user to Analytics User group
-Logged in as 'test user' (confirm group/roles in My preferences to only Analytics User group)
-Logged out as 'test user'
-Logged into my own account as Admin
-View Manage License screen and confirm that 'test user' is reporting correctly as Analytics User
-Imported our existing Cognos 10.2.1 into Cognos 11.0.9 environment
-Double checked all security group memberships
-Logged in as 'test user' (confirm group/roles in My preferences to only Analytics User group)
-Logged out as 'test user'
-Logged into my own account as Admin
-View Manage License screen and confirm that 'test user' is reporting incorrectly as Analytics Administrator User
    -Note: I did confirm and double check all the groups in the Security -> Cognos screen and this user is only a member of "Analytics User" group. Another confirmation is the Test user's my preference screen (groups/roles)


I understand that the issue starts happening after I imported our existing Cognos 10.2.1 content store. I am not however able to understand the cause of this issue and why the user is being reported as Analytics Administrator. (Even after I logged in as test user and confirm the groups/roles in my preferences).

Any thoughts from anyone? Anyone else having this issue?

Thanks
Title: Re: C11.0.9: Manage License is incorrectly reporting users as Admins
Post by: MFGF on 15 Mar 2018 11:19:28 AM
Quote from: bstn82 on 15 Mar 2018 10:53:03 AM
Hi All,

I do have a case opened with IBM and they confirmed the issue that I am having. They will continue their investigation, but I thought I shared this issue with the community to learn if anyone else if having this issue.

Issue: Members of the "Analytics Users" group are showing up as "Analytics Administrators" in the Manage License screen. Step to re-produce the issue are below.

Steps to reproduce:
-Start 11.0.9 against a blank SQL server content store database
-Made myself a member of the Analytics Administrator group
-Removed Everyone a member of the Analytics Administrator group and all other groups
-Added a test user to Analytics User group
-Logged in as 'test user' (confirm group/roles in My preferences to only Analytics User group)
-Logged out as 'test user'
-Logged into my own account as Admin
-View Manage License screen and confirm that 'test user' is reporting correctly as Analytics User
-Imported our existing Cognos 10.2.1 into Cognos 11.0.9 environment
-Double checked all security group memberships
-Logged in as 'test user' (confirm group/roles in My preferences to only Analytics User group)
-Logged out as 'test user'
-Logged into my own account as Admin
-View Manage License screen and confirm that 'test user' is reporting incorrectly as Analytics Administrator User
    -Note: I did confirm and double check all the groups in the Security -> Cognos screen and this user is only a member of "Analytics User" group. Another confirmation is the Test user's my preference screen (groups/roles)


I understand that the issue starts happening after I imported our existing Cognos 10.2.1 content store. I am not however able to understand the cause of this issue and why the user is being reported as Analytics Administrator. (Even after I logged in as test user and confirm the groups/roles in my preferences).

Any thoughts from anyone? Anyone else having this issue?

Thanks

Hi,

When you look at the memberships for the user, are you looking in the Manage > Accounts dialog, or are you launching the Administration Console and checking every group and role in there?

If I had to guess, I'd wager there is a spurious "Everyone" membership in one of the roles or groups you imported, that then ties back to the one of the administrative groups or roles. It might be a laborious task to find it by looking at the memberships of every group and role in the Administration console...

Good luck!!

MF.
Title: Re: C11.0.9: Manage License is incorrectly reporting users as Admins
Post by: dougp on 15 Mar 2018 11:22:01 AM
I'm using 11.0.7.  I haven't seen that, specifically, but the Licenses tool keeps randomly switching my users between Analytics Explorer and Analytics User.  I'm not getting 100% consistency from my testing, but it appears that an Analytics User can use the system, including creating a schedule, but when the schedule runs they become an Analytics Explorer.
Title: Re: C11.0.9: Manage License is incorrectly reporting users as Admins
Post by: bstn82 on 19 Mar 2018 12:37:56 PM
MFGF: Thanks. I checked all the groups in the Administration Console as well as the new "Account" screen in C11. In addition, the IBM support rep also verified that the "Everyone" groups have been removed from everywhere.

DougP: This makes sense though. It seems that the "Manage License" functionality will only keep track of the last user login's activities, not the lifetime of the user.

The biggest question I have is how IBM will use this functionality during a routine audit. We are reluctant to make the move to C11 if this functionality is not reporting the metrics correctly.
Title: Re: C11.0.9: Manage License is incorrectly reporting users as Admins
Post by: sdf on 18 Jul 2018 12:21:00 PM
That's as much as what is indicated in their KB.

https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ag_manage.doc/t_ca_licenses.html (https://www.ibm.com/support/knowledgecenter/en/SSEP7J_11.0.0/com.ibm.swg.ba.cognos.ag_manage.doc/t_ca_licenses.html)