Possible to have multiple Adminstration,Configuration, SQL Server Signons?

[TheBrenda]

Disclaimer, my Cognos is not strong. We want to add a level of security to Report Writer for viewing credit card numbers. Elevated users can see the clear credit card numbers and and non-elevated users will only see masked values. We have set up a seperate Cognos security role and have created SQL Stored Procedure based Query Subject that will get passed the @CAMID and determine to pass back the clear card number or a masked value. BUt since everyone is signed onto SQL with the same Cognos Administration, Configuration SQL Signon, even those that are not in the elevated Cognos security role could potentially write a customized query and retrieve the card numbers.

I want to use SQL permissions/roles to allow the elevated Cognos signon permission to see the clear card values. The other Cognos signon would not have the SQL permissions/roles to see the clear card numbers.

This is not a SQL question. This is a question to see if you can have Cognos security roles use different SQL Server Signons. Thanks

[MFGF]

Disclaimer, my Cognos is not strong. We want to add a level of security to Report Writer for viewing credit card numbers. Elevated users can see the clear credit card numbers and and non-elevated users will only see masked values. We have set up a seperate Cognos security role and have created SQL Stored Procedure based Query Subject that will get passed the @CAMID and determine to pass back the clear card number or a masked value. BUt since everyone is signed onto SQL with the same Cognos Administration, Configuration SQL Signon, even those that are not in the elevated Cognos security role could potentially write a customized query and retrieve the card numbers.

I want to use SQL permissions/roles to allow the elevated Cognos signon permission to see the clear card values. The other Cognos signon would not have the SQL permissions/roles to see the clear card numbers.

This is not a SQL question. This is a question to see if you can have Cognos security roles use different SQL Server Signons. Thanks

Yes - you can do this. You need to go to the Admin Console, find the data source for your database, then drill into it until you see the signon. You can add a second signon using the second database user ID and password, then go into the properties of each signon and change the security permissions of each so that only the relevant groups/roles have access.

Cheers!

MF.