COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: krishdw85 on 19 Dec 2024 04:37:27 AM

Title: User Access management Automation
Post by: krishdw85 on 19 Dec 2024 04:37:27 AM
Hi Team,

I am planning to explore the options on IBM Cognos User Access management Automation.
Can you please share me if you have implement this in your project if yes please share me how can I proceed.
Title: Re: User Access management Automation
Post by: dougp on 19 Dec 2024 10:30:43 AM
I'd need more information.  What does that even mean?  What are you trying to do?  Cognos Analytics handles user security and profiles pretty well.  What automation do you think you need?
Title: Re: User Access management Automation
Post by: krishdw85 on 20 Dec 2024 01:45:17 AM
Daily no of user requests are coming from service now and we are doing it manually everytime.... like user adding or removing to specific groups & roles.

I want to automate the process of user provisioning and deprovisioning and i am looking for possibilities in cognos.
Title: Re: User Access management Automation
Post by: dougp on 02 Jan 2025 01:33:38 PM
It sounds like you are assigning permissions by user.  Maybe you're working too hard.

We use Active Directory.  I assign permissions based on security groups.  Someone on the business side manages the membership of each group.

But if you don't use an external directory namespace -- you're stuck with the Cognos Analytics Administrator(s) managing individual permissions.  You can use Cognos groups and roles, but the admin will still need to maintain those.

We have implemented full-on self service reporting here.  For the vast majority of our content, everyone in the organization has Travers and Run permissions.  (a handful of folders have tighter security because of sensitive data)  So, anybody can run reports.  And users have Write permissions in appropriate folders.  And they have Report Studio and Dashboard capabilities.  So they can copy and modify reports and dashboards and save them to their My Content or whatever folder in Team Content where they have Write permission.