Appling Security in Cognos10 Part I

Apply Security in

Framework Manager Guide-I

Provided By: BISP Created By: Mitesh Agrawalhttp://bispsolutions.wordpress.com Reviewed By: Amit Sharma http://learncognosreports.wordpress.com/ Team BISP

Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 1

This is another document for Cognos for Beginner’s Series. This document provides Overview of Security, Creating Users, Creating Groups or Roles, Set Access Permission, Object level, and Data/Row level security.

http://bispsolutions.wordpress.com/

Table of Contents

Overview of Security in Framework Manager…. ……………………..…....3

Creating Groups and Roles………….…………………….….……………...4

Set Access Permission to User, Groups or Roles…...………………………15

Object level Security…………………………………………… …..………….21

Row Level/ Data L evel Security……………………………………...……...26

Security Validation…………………………………………… ….…………….32


Overview of Security in Framework Manager-

In IBM Cognos Framework Manager , Security is a way of restricting access to metadata and data. Three types of security in IBM Cognos Framework Manager-

Object level security

Row/Data level security

Package level security

Object level security- Object level security allows you to secure an object directly by allowing or denying users access to the object , or keeping it hidden from all users.

Row/Data level security- Row/Data level security allows you to create a security filter and apply it to a specific Query Subject. This level of security controls the data that is shown to the user when they build and run their reports.

Package level security- Package level security allows you to apply security to a package and identify who has access to that package.

Creating Groups and Roles

Firstly we need to create a Groups Or Roles. After creating Groups or Roles, we will assign Users to them.

Steps to create a Groups Or Roles-

Go to Start All ProgramsIBM Cognos BI Developer Edition IBM Cognos BI Developer Edition


Or

Type the following link on the URL of the web browser - http://localhost:9300/cognos_developer/manager/main.html

Cognos welcome page will appear, In this page Go to Launch IBM Cognos Administration.

Click on Security.


Click on Users, Groups and Roles and then click on Cognos Folder.

On the toolbar, click the new Group[ ] or new Role[ ] button. Here I am creating a new Group.

Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.


Here we are creating a group without Users. We will assign users to this group later and click Finish.

We can view the new Group (i.e; sales group) will be appear on the screen in the cognos folder.


Similarly we can create more Groups or roles. Now we will create a group (i.e;

Marketing Group). On the toolbar, click the new Group[ ] or new Role[ ] button.

Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.


Here we are creating a group without Users. We will specify users to this group later and click Finish.

We can view the new Group (i.e; Marketing group) will be appear on the screen in the cognos folder.


Creating Users

For providing a security to users , Firstly we need to create a users. If you have created users previously, no need to create users.

To create a user, use the following steps-

Go to Start All ProgramsIBM Cognos BI Developer Edition IBM Cognos BI Developer Edition

Or

We can simply type http://localhost:9300/cognos_developer/manager/mail.html on the address bar of the browser. Cognos welcome page will appear.

In the IBM Cognos BI Developer Edition Manager page ,click Users then Add to add new users. By default it will provide us Administrator user.


http://localhost:9300/cognos_developer/manager/mail.html

Add User page will appear, To create users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.

After click on green arrow the Selected Entries will be appear in the Selected Entries Pane from Available Entries Pane and press ‘Ok’.


You can view that new created user will be appear on the IBM Cognos BI Developer Edition Manager screen, who belongs to sales group . Again to add user, click ‘Add’ button.

Add User page will appear, To add users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.


After click on green arrow the Selected Entries will be appear in the Selected Entries Pane and press ‘Ok’.

Again, we can view that new created user will be appear on the screen, who belongs to sales group. Again to add user, click ‘Add’ button.


Similarly, we can create many users. After create users, all the users will be appear on the IBM Cognos BI Developer Edition Manager Screen with their membership( i.e; Groups or Roles).

Set Access Permissions to Users, Groups or Roles

Set Access Permission for Users, Groups or Roles. We need to do following steps-

Simply type http://localhost:9300/p2pd/servlet/dispatch on the URL of the web browser. Login Page will appear, specify User Id=administrator and Password, if you gave previously during installation time and click ‘Ok’


http://localhost:9300/p2pd/servlet/dispatch

Cognos portal page will appear, then Go to Launch IBM Cognos Administration.

lBM Cognos Administration Page will appear, now click on Security .

Click on Cognos folder, because this folder contains all the Groups and Roles.


Locate the group or roles for which, you want to set access permissions. In the Actions column, click More.

Perform an Action for this entry Window will appear, click the set properties button [

] for this entry that will be appear in the Available actions.


After click the set properties button, Set properties page will appear, now click on Members. After click on members, the users/members will be appear for sales group, which we have specified previously for sales group.

Now click Permission then Override the access permissions acquired from the parent entry and click Add to grant permission to users, group or roles.

Now click on cognos Folder to select Groups/Roles.


Click on Show users in the list and select the Groups/Roles from Available Entries Pane and press green arrow.

After click green arrow , the selected Groups/ Roles will be appear in the Selected Entries Pane and click ok.


Now click the sales group check box and grant Read Permission to Group/Role (In my case sales group) and press ok. We can also Deny access permission to users, groups or roles.

Object Level Security

Steps to Add Object level Security-

Firstly we will login from administrator to Framework Manager.

Go to StartAll ProgramsIBM Cognos BI Developer EditionIBM Cognos Framework Manager.


Click create a new project and any project which you have created previously and type User ID= administrator and Password in the corresponding block for authentication. If you provided password during the installation, then write password here ,otherwise keep it blank and click ‘OK’.

In the framework manager, expand the Business ViewClick the object , which you want to grant permission to Users, Groups Or Roles. Here I am selecting Facts, Order, Products and Time object for sales group.


From the Actions menu, click Specify Object Security.

Specify Object Security- Multiple object Selected Page will appear, click Add to add new users, groups or roles.

Select Users and Groups page will appear, now click on cognos folder. This folder contains all the predefined and user defined Group and Roles.


Select Groups or Roles, which we have created previously and press green arrow. Here I am selecting a sales group.

We can view that selected Entries (Groups/Roles) will be appear in the Selected entries pane from Available entries pane and press ‘Ok’.


We can view that selected Groups or Roles will be appear on the screen. Specify security rights for each user, or groups. To grant access to a user, group ,or roles select the Allow check box or select Deny check box to deny access to a user, group or roles and press ‘Ok’.

Row Level/ Data Level Security

To specify Row level/ Data level Security ,expand the business view and Select any Query Subject. Here I am selecting Time Query Subject.


Now click Action Specify Data Security.

Specify Data Security- Time page will appear and click Add Groups button to populate the Query Subject with security filters.


Select Users and Groups Page will appear. To select Groups/Roles, click Cognos Folder.

Now click on Show Users in the List and select the Groups or Roles (In my case sales group) from the Available Entries Pane and press green arrow.


We can view that the Selected Group/Roles will be appearing in the Selected Entries Pane and press ok.

Specify Data Security- Time page will appear, we can view that the group or roles will be appear on the screen.


Click in the box below 'Filter' and select 'Create/Edit Embedded'. This is basically a Security Filter ..

The Filter Definition Window will appear. Expand the Business ViewTime.


Now Select the Per_Name_Year(i.e; Year) Query Item and click blue arrow button.

The Selected Query Item will be appear in the Expression Definition box and press ok.


We can view that the Selected Group/Roles and Filter will be appear on the screen and press ‘Ok’.

Security Validation

To Package level Security, first we need to create a package and publish the package. Go to PackageCreate Package


Specify Package Name and press ‘Next’. Here Description and Screen tip are optional.

Define the objects , which you want to include in this package from the project.


Select the set of functions that will be available in this package and press green arrow.

We can view that Selected Function Sets will appear in the Available Functions Sets and click Finish.


Your package have been successfully created. Now press ’Yes’ for open the Publish Package Wizard otherwise press ’No’.

Publish Wizard Page will appear. By default it will provide us Public Folder location in the content store to this new package. Now press the Folder tab to select a new location to this new package.


Click on cognos link to navigate My Folder.

Click on My Folders and then click ok.


We can view that Package Wizard Location has changed and press Next.

In this window we have to add the security privileges to the packages, which type of users, groups and roles can access the package ,click the ’Add’ button.


Click Cognos Folder.

After click on Cognos ,we can view that groups or roles will be appear om the screen. Here I am selecting a sales group and press green arrow.


The sales group will be appear in the Selected Entries Pane from Available Entries Pane.

The selected groups and roles(i.e; sales) will be able to use this package and press Next.


Verify the package before publishing it , now press ‘Publish’ to publish the package.

You have successfully published the package , now click on ‘Exit this wizard’ and press ‘Finish’.


Note- To view the IBM Cognos Portal Screen type- http://localhost:9300/p2pd/servlet/dispatch on the URL.

We can view the package ,which we have created previously. Now click Package.

To validate Security , Go to Launch Report Studio.

IBM Cognos Report Studio screen will appear and select the Create new.


http://localhost:9300/p2pd/servlet/dispatch

Select the type of tool, which you want to use to create the report. Here I am selecting a List tool and press Ok.

The Insertable Objects Pane will appear, we can view that selected object for the granted Users and Group will be appear on the screen. This screen shows us Object level Security.


Now expand the Time Dimension Query Object, and simply drag the objects from the Insertable Objects Pane and drop it in the Middle Pane

Click Test button.


By default you will view the report in the HTML format on IBM Cognos viewer, This screen shows us Row/ Data level Security.


Appling Security in Cognos10 Part I

Documents

set properties button

set access permissions

row data level security

insertable objects pane

selected entries pane

object level security

case sales group

package level security