Admin Console

[guthikv]

Hi all,

I have a question regarding the ability to see the Cognos administration console. I would like to disable the the functionality for all our report authors where they shouldn't be seeing the 'Cognos Adminsitration' link under 'Launch' on the cognos connection.

Currently the report authors were able to see the 'Cognos Administartion' link, How would I disable that?

Please help.

[Suraj]

Just remove the authors from all admin roles.

[guthikv]

Thanks for the reply. I am on Cognos 10. When i launch the cogons administration, go to the 'Security Tab>administration capability> and properties> permissions> I see 4 entries.
1. report admins 2. directory admin 3. planning rights admin 4. server admins.

I dont see any report authors within it.

Please help. I think I am missing something.

Thanks.

[Suraj]

Go to 'Security'> User groups and roles.
Go through properties and member of all admin roles and make sure only admins are the members.
Remove authors from all admin roles.

[guthikv]

Hi Suraj,

Thanks for the reply. I think I am missing something. This is what I have done.

Security tab> user groups & Roles> Cognos Namespace> Under this we had default gropus and roles.
I checked alll the Admin groups and report authors aren't listed anywhere.

[Suraj]

Check for 'Everyone' or 'All Authenticated Users' in admin roles and remove them.
The admin roles should not have any users or groups except that have IBM administrator license.

[guthikv]

Hi Suraj,

Out of the Admin roles (system administrators, server administrators, report admin, Powerplay admin, planning rights admin, planning payroll admin,Data manager authors),
I see Planning Payroll admin and Data manager admin has 'Everyone and 'All Authenticated Users' respectively.

remaining all groups have their respective admin groups only.

[Suraj]

Any admin role gets access to administration window and also counts as admin license.
Remove 'Everyone' and 'All Authenticated Users' from ALL admin roles.

[guthikv]

We have a report author who is also a Planning administrator deals with all the Planning/Budgeting in Cognos. For some reason she was able to still see the 'Cognos Admin' link located under Launch button. She is making all sorts of changes to the access permissions to the Planning folders. I couldn't figure this out as how to disable the Cognos admin link when she opens cognos portal.

Any help??

Thanks.

[Suraj]

Go to Security->Capabilities using system admin account.
Then click on properties for 'Administration'.
Click 'override' and then click 'Planning Administrator' and deny all privileges (read,write,execute,set policy, traverse).
It will block users in that role to access administration.

If that doesn't work, you can go to administration/configuration properties and deny there as well.

If that also doesn't work, just tell her nicely not to change permission over a lunch or dinner... :)

[guthikv]

Thanks for the reply. I didn't get the second one. Did you mean security>User groups & roles under administration?. The last one was a good one. Thats funny.

[Suraj]

1st suggestion should be enough.
Try that and see.