COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: RiRo on 06 May 2021 02:51:46 AM

Title: add additional admins from other authentication namespace
Post by: RiRo on 06 May 2021 02:51:46 AM
Hi!

I have installed Cognos V11, created an authentication namespace called ns1, added Active Directory groups for consumer and admin roles and removed the everyone from the unwanted roles to have security in place.

Now I added a second authentication namespace called ns2. There are also groups for admin and consumer roles.

My problem now is, how I can add those groups from ns2 into admin and consumer roles, because my adminaccount from ns1 doesn't have the ability to look into that namespace ns2?

The error I get, when accessing BI via Manage -> People -> Accounts is
"You need to sign in to this namespace to view the content."

Regards
Robert
Title: Re: add additional admins from other authentication namespace
Post by: MFGF on 06 May 2021 08:40:30 AM
Quote from: RiRo on 06 May 2021 02:51:46 AM
Hi!

I have installed Cognos V11, created an authentication namespace called ns1, added Active Directory groups for consumer and admin roles and removed the everyone from the unwanted roles to have security in place.

Now I added a second authentication namespace called ns2. There are also groups for admin and consumer roles.

My problem now is, how I can add those groups from ns2 into admin and consumer roles, because my adminaccount from ns1 doesn't have the ability to look into that namespace ns2?

The error I get, when accessing BI via Manage -> People -> Accounts is
"You need to sign in to this namespace to view the content."

Regards
Robert

Hi,

The trick here is to log into both namespaces. Log in as normal to your first namespace as your Admin user, then without logging out click on your user icon on the App Bar and use the Log In link to log in again to your second namespace. Once you have done this you will have the Admin privileges from your first namespace to add the groups and roles from the second namespace to wherever you need them to be.

Cheers!

MF.
Title: Re: add additional admins from other authentication namespace
Post by: RiRo on 07 May 2021 12:49:59 AM
Hi MF!

Thank you for that trick, now it works.

Another question about Users in Cognos.
Is there a possibility to have some kind of local administrator in Cognos.
I mean in case the LDAP doesn't work or admin group was accidently deleted?

How can I log in with admin privileges in such a case?

Thanks
Robert
Title: Re: add additional admins from other authentication namespace
Post by: MFGF on 07 May 2021 06:44:13 AM
Quote from: RiRo on 07 May 2021 12:49:59 AM
Hi MF!

Thank you for that trick, now it works.

Another question about Users in Cognos.
Is there a possibility to have some kind of local administrator in Cognos.
I mean in case the LDAP doesn't work or admin group was accidently deleted?

How can I log in with admin privileges in such a case?

Thanks
Robert

Hi,

You have two namespaces, so you could add an Admin user to your second namespace for use in emergencies? If the first namespace (with your regular Admin user in it) has issues you'd still be able to log in using the second namespace.

Just a thought.

MF.