Restrict Open in Report Studio access based on IBM EMM user roles

[CIY]

Hello,

I have a Cognos 10.1 instance integrated with IBM EMM and using the IBM EMM authentication. The issue is that whenever an IBM EMM user runs a report from the IBM EMM interface and uses IE, they can see the Open in Report Studio button in the report page. I'd like to restrict that feature to a group of users who have a certain role in the IBM EMM suite.

Any clues/hints would be appreciated.

Thank you,
CIY

[MFGF]

Hello,

I have a Cognos 10.1 instance integrated with IBM EMM and using the IBM EMM authentication. The issue is that whenever an IBM EMM user runs a report from the IBM EMM interface and uses IE, they can see the Open in Report Studio button in the report page. I'd like to restrict that feature to a group of users who have a certain role in the IBM EMM suite.

Any clues/hints would be appreciated.

Thank you,
CIY

It sounds like you don't have the capabilities locked down properly from within the Cognos Administration console. You only see this button when the user (or a group/role they belong to) has the Report Studio capability granted to them. If you remove them from that capability, they don't see the option in the user interface to launch Report Studio.

Cheers!

MF.

[CIY]

Thanks for the hint MF.

Unfortunately in Cognos Security I can't find the exact roles I have in IBM EMM, hence my blockage.

[MFGF]

Thanks for the hint MF.

Unfortunately in Cognos Security I can't find the exact roles I have in IBM EMM, hence my blockage.

EMM is probably only used here for authentication (ie is this a valid user or not). Authorization is done within the Cognos Administration console. There are two places you can check:

1. In the Cognos namespace. By default this contains roles that already have capabilities assigned to them. Take a look at the members of these roles to see if your EMM users or groups have been added as members (therefore inheriting the capabilities of the role). I'd probably start by looking at the "Authors" role. Also take a look to see if the "Everyone" group is a member - if so, then this means every single Cognos user has those capabilities. If so, you need to remove "Everyone" as a member and add in the relevant users/groups as members.
2. In Capabilities. See which users/groups/roles have permissions granted in the properties of the Report Studio capability. Amend as necessary.

Cheers!

MF.