If you are unable to create a new account, please email support@bspsoftware.com

 

News:

MetaManager - Administrative Tools for IBM Cognos
Pricing starting at $2,100
Download Now    Learn More

Main Menu

setting up authorization in Cognos Connection

Started by cognosfreelancer, 25 Oct 2005 02:34:43 PM

Previous topic - Next topic

cognosfreelancer

Folks

I invite your feedback. Please read on and thank you for indulging me..

I have to set up access to a large number of sub folders within the public folders domain for a large number of users that exist in the Corporate Active Directory.

Each group of users will have a report administrator. However I cannot add these persons to the built in entry 'Report Administrators'. The reason for this is that report administrators should only have access to their respective sub solders and not the entire public folders content.

The solution I have is to create two user groups for each user community. One user group would have the admin role. The other user group will comprise the user community. The former would be granted the 'set policy' privilege.

All administrator sub groups from above would be added to a group called 'modified Report administrators'. I could then give it further report administrator privileges. This would also make for easier maintenance.

Please pick holes if any in the above scenario and see if you could come up with a more elegant solution.

Keep in mind my objective of restricting access to sub folders and the constraints of a large number of user groups and the resulting headaches in maintainng them.

NKT

jmorrison

Did your solution work for you.  I need to implement the same thing.  Finance folder for Finance Reports, Marketing folder for Marketing reports, etc but I need to have report admins for each folder and report consumers in each folder.


Darek

You could move the root of Public Folders for non-admins to make it even more ellegant. This way they would never even see packages (unless from Report Studio) and just the content you decide to allow per each client.

dbga

Hi Darek,

Would you please elaborate on this? How do you move the root of the public folder?


Darek

#4
one of the system.xml files in templates has a reference to non-admin public folder root. You can change it to any folder or package of your choice.

dbga

Thank you Darek, I have found a step by step description in another one of your topics here as well. Thanks again.