Can't grant access to report studio

[m23]

Hi,

I've got a tricky problem. I can't seem to grant report studio to any users except through the predefined report administrators or system administrators role. If I grant it through the capabilities it doesn't work. I don't have any denies in there that are overiding the grants. I even went as far as to grant some one all the capabilities as well as the two user interface profiles. Still no report studio in the launch menu for them. As soon as I add them to report administrators it comes up. I also can't use the authors role becuase I deleted it. Has anyone seen anything like this?

[pumccg]

Ouch! Not a good idea to delete the Predefined groups and roles. Anyway, you can recreate an Authors role, assign users to it, then re-assign the default access permissions. These are fully documented in Appendix B of the Administration and Security Guide.

[m23]

You can recreate an Authors role, assign users to it, then re-assign the default access permissions. These are fully documented in Appendix B of the Administration and Security Guide.

Thanks for that information I didn't realise they were specified there. I tried recreating the authors role according to appendix B but it still isn't working. This is what isn't making sense to me. I have tried granting every capability to a user and it still doesn't work. It should be possible to grant report studio to a user without using the predefined roles. For some reason in my environment I can't do it.

Does anyone have any other suggestions I can try?   

[pumccg]

Did you also re-create the permissions in the User Interface Profiles area?

Your Authors need execute and traverse permissions to both the professional and Express profiles.

[m23]

Yes I did grant execute and traverse to both Express and Professional in the User Interface Profiles section.

Cognos support want me to send them my entire content store and user account info :(. Not sure I want to do that.

[pumccg]

I'm about out of ideas. Never easy to send all this stuff to Cognos Support.

When you created your new Authors group, did you also set Permissions for it?

The defaults are:

All Authenticated Users - Read/Traverse
Authors - Read/Execute/Traverse
Directory Admins - all 5

(good luck)

[hawaii_desperado]

I have the exact same issue.   m23 have you by any chance solved it ?

[m23]

When you created your new Authors group, did you also set Permissions for it?

Yes I did remember do this. Thanks for your suggestions they have been helpful even if they didn't resolve  my issue. I suspect there is a bug.

[m23]

I have the exact same issue.   m23 have you by any chance solved it ?

No unfortunatley it is still an issue. Cognos supports latest suggestion is to just add my report studio users to the Report Administrator role and then rename it to Authors. This works but I should be able to grant report studio to users without using a role if thats what I want to do. It works for all the other capabilities but Report Studio refuses to comply.

Are you on 10.1.1 FP2? I've had other issues that look like bugs since installing this Fix Pack.

[CognosPaul]

Just a quick sanity check - which browser are your users using?

[pumccg]

The purpose of the original predefined Authors role is to simplify the process of granting access to RS. By simply adding the required users to it you don't have to recreate all the many areas it has already been granted access to which gives it access to RS. As you can see it's not a simple process. I can only think you've missed a setting somewhere when you tried to recreate the role.

You may have solved one problem, by adding your new author role to the Report Administrator role, but you've now given all your authors the additional admin power of the RA. This may not be desirable.

[m23]

which browser are your users using?

They are using IE7 and IE8

[m23]

I can only think you've missed a setting somewhere when you tried to recreate the role.

You may have solved one problem, by adding your new author role to the Report Administrator role, but you've now given all your authors the additional admin power of the RA. This may not be desirable.

I'm pretty sure I didn't miss a setting. I tried adding a user to all capabilities (including user interface profiles) it still didn't work. Looking under capabilities in their personal tab they had ticks for everything. I have no trouble granting access to everything else without using the predefined roles.

I agree using Report Adminstrator is not a good solution but my users need report studio so I have to use it. Now it's gone there is no way to get the Authors role back. I'm not keen on uploading my 900mb content store to cognos support. Im thinking of installing 10.2 on a test computer and seeing if that resolves it but I won't be able to do that for a few weeks.

[m23]

Good news, I found the solution. I went to a Cognos user group meeting last night and there was a technical expert from IBM there. I descibed my problem and he knew the solution straight away. Apparently it's not documented and he has encountered it a few times before.

In user interface profiles, it's not obvious but there is a top level. So when clicking on User Interface Profiles there is the express and Professional capabilities but there is also a little icon in the top right that allows permissions to be set for the top level. Execute and Traverse also need to be granted to this top level. So I added this and hooray I can now grant report studio to my users and no longer need to use the report administrators role.

[pumccg]

Did you also re-create the permissions in the User Interface Profiles area?

Your Authors need execute and traverse permissions to both the professional and Express profiles.

That's what I was referring to in the above quote. Sorry for not explaining it better. Glad you finally got there.

[m23]

That's what I was referring to in the above quote.

Oops I see that now. I didn't realise permissions could be granted at the top level and thought you were referring to granting access in the actual express and professional items  :(

[pumccg]

The same applies to quite a few of the Capabilities themselves. Most are single level, and permissions are set in one place, but for the multi-level ones you set permissions at the top, then for each sub-capability.

[monica]

Thank you PUMCCG and M23 I got the solution. Was facing same issue :)