Forgot to Delete Everyone from System Admin Group- How to set User Licence...

[HighKeys]

Hi,

yesterday i was working on some Server things and forgot to remove the everyone group from the SysAdmin group, so 2 Users logged in during this and now they are falsely listed as Admin (Already corrected the security settings and verified they are not a admin anymore), anyways when i check the licence usage in cognos it stills show me the users under Admins.

How can i force Cognos to refresh these values?


Thanks

[MFGF]

Hi,

yesterday i was working on some Server things and forgot to remove the everyone group from the SysAdmin group, so 2 Users logged in during this and now they are falsely listed as Admin (Already corrected the security settings and verified they are not a admin anymore), anyways when i check the licence usage in cognos it stills show me the users under Admins.

How can i force Cognos to refresh these values?


Thanks

Hi,

I suspect you will need to delete the user profiles of those two users within your Cognos instance, then refresh the licenses page in the Admin console, then have them log back in again to set up new profiles. You will need to make sure everything in their My Content area has been saved elsewhere, plus you will need to set up their preferences etc again.

https://www.ibm.com/support/pages/how-remove-used-license-when-user-will-no-longer-be-accessing-cognos-analytics

Cheers!

MF.

[dougp]

There's a more brute force way to do this, but for just 2 users, I agree with MFGF.

However, will the problem randomly return?  Which version of Cognos Analytics are you using?  11.0 and some 11.1 releases couldn't count.  For a while, all of my users were showing up as admins.  Having only 2 Analytics Administrator per-user licenses, I even engaged IBM Support to ensure capabilities were set correctly.  We didn't identify anybody but me having any admin capabilities, but my admin license count was quite high.  It's all sorted out now on 11.1.7.

[HighKeys]

There's a more brute force way to do this, but for just 2 users, I agree with MFGF.

However, will the problem randomly return?  Which version of Cognos Analytics are you using?  11.0 and some 11.1 releases couldn't count.  For a while, all of my users were showing up as admins.  Having only 2 Analytics Administrator per-user licenses, I even engaged IBM Support to ensure capabilities were set correctly.  We didn't identify anybody but me having any admin capabilities, but my admin license count was quite high.  It's all sorted out now on 11.1.7.

Thanks both for your input, so i know what i had to do :)

I'm on the latest version (1.2.4 FP1), if the licenses count is not correct, that would be interesting as i have also the todo to check why we have more admins then we should have...


Thanks!


Edit: Thank you so much, this worked! But still have an issue, i switched the identifier from GUID to DN (cause it was a server movement, and i have to do this to i don't create new users) but the user with the GUID is still in there, i can't delete his profile cause its just deleting the one with the DN identifier, i think i have to switch the identifier again, delete the profile and switch back to dn right?

Thank for your support, you are great!

[MFGF]

But still have an issue, i switched the identifier from GUID to DN (cause it was a server movement, and i have to do this to i don't create new users) but the user with the GUID is still in there, i can't delete his profile cause its just deleting the one with the DN identifier, i think i have to switch the identifier again, delete the profile and switch back to dn right?

Hi,

That would be the course I would take here. Sorry, I'm not so versed in that specific authentication technology, but it makes sense to me that Cognos will only remove profiles tied to IDs it knows about, so it sounds like a reasonable thing to try.

Cheers!

MF.

[HighKeys]

Hi,

just want to Update you, worked fine, i was able to delete the Users created with the wrong unique identifier this way.

Just my own User is now twice listed, cause it didn't worked out to delete my own profile, before restarting the server with the DN as identifier.. Would appreciate any ideas on this :)


Thanks
BR

[MFGF]

Hi,

just want to Update you, worked fine, i was able to delete the Users created with the wrong unique identifier this way.

Just my own User is now twice listed, cause it didn't worked out to delete my own profile, before restarting the server with the DN as identifier.. Would appreciate any ideas on this :)


Thanks
BR

From an audit perspective, you should be fine. Licenses are per named user, so as long as your can show each of the profiles belongs to you, that just counts as your license being used to log in a couple of different ways.

Unless you can find a way to log in simultaneously using both the GUID and DN methods, I can't see how you can remove the second profile.

Cheers!

MF.

[HighKeys]

From an audit perspective, you should be fine. Licenses are per named user, so as long as your can show each of the profiles belongs to you, that just counts as your license being used to log in a couple of different ways.

Unless you can find a way to log in simultaneously using both the GUID and DN methods, I can't see how you can remove the second profile.

Cheers!

MF.

Oh well, its good to konw that we should be not worried for an audit in that case! I activated anonymus access and delteted the users :)

Thanks for all your insights!