COGNOiSe.com - The IBM Cognos Community

IBM Cognos 10 Platform => Cognos 10 BI => Cognos Administration => Topic started by: guthikv on 14 Sep 2011 11:55:39 AM

Title: Admin Console
Post by: guthikv on 14 Sep 2011 11:55:39 AM
Hi all,

I have a question regarding the ability to see the Cognos administration console. I would like to disable the the functionality for all our report authors where they shouldn't be seeing the 'Cognos Adminsitration' link under 'Launch' on the cognos connection.

Currently the report authors were able to see the 'Cognos Administartion' link, How would I disable that?

Please help.
Title: Re: Admin Console
Post by: Suraj on 14 Sep 2011 01:54:35 PM
Just remove the authors from all admin roles.
Title: Re: Admin Console
Post by: guthikv on 19 Sep 2011 09:59:20 AM
Thanks for the reply. I am on Cognos 10. When i launch the cogons administration, go to the 'Security Tab>administration capability> and properties> permissions> I see 4 entries.
1. report admins 2. directory admin 3. planning rights admin 4. server admins.

I dont see any report authors within it.

Please help. I think I am missing something.

Thanks.
Title: Re: Admin Console
Post by: Suraj on 19 Sep 2011 10:27:05 AM
Go to 'Security'> User groups and roles.
Go through properties and member of all admin roles and make sure only admins are the members.
Remove authors from all admin roles.
Title: Re: Admin Console
Post by: guthikv on 20 Sep 2011 04:44:57 PM
Hi Suraj,

Thanks for the reply. I think I am missing something. This is what I have done.

Security tab> user groups & Roles> Cognos Namespace> Under this we had default gropus and roles.
I checked alll the Admin groups and report authors aren't listed anywhere.

Title: Re: Admin Console
Post by: Suraj on 20 Sep 2011 05:54:26 PM
Check for 'Everyone' or 'All Authenticated Users' in admin roles and remove them.
The admin roles should not have any users or groups except that have IBM administrator license.
Title: Re: Admin Console
Post by: guthikv on 21 Sep 2011 04:52:56 PM
Hi Suraj,

Out of the Admin roles (system administrators, server administrators, report admin, Powerplay admin, planning rights admin, planning payroll admin,Data manager authors),
I see Planning Payroll admin and Data manager admin has 'Everyone and 'All Authenticated Users' respectively.

remaining all groups have their respective admin groups only.
Title: Re: Admin Console
Post by: Suraj on 22 Sep 2011 10:07:25 AM
Any admin role gets access to administration window and also counts as admin license.
Remove 'Everyone' and 'All Authenticated Users' from ALL admin roles.
Title: Re: Admin Console
Post by: guthikv on 30 Sep 2011 11:42:16 AM
We have a report author who is also a Planning administrator deals with all the Planning/Budgeting in Cognos. For some reason she was able to still see the 'Cognos Admin' link located under Launch button. She is making all sorts of changes to the access permissions to the Planning folders. I couldn't figure this out as how to disable the Cognos admin link when she opens cognos portal.

Any help??

Thanks.
Title: Re: Admin Console
Post by: Suraj on 30 Sep 2011 12:16:32 PM
Go to Security->Capabilities using system admin account.
Then click on properties for 'Administration'.
Click 'override' and then click 'Planning Administrator' and deny all privileges (read,write,execute,set policy, traverse).
It will block users in that role to access administration.

If that doesn't work, you can go to administration/configuration properties and deny there as well.

If that also doesn't work, just tell her nicely not to change permission over a lunch or dinner... :)
Title: Re: Admin Console
Post by: guthikv on 30 Sep 2011 03:41:21 PM
Thanks for the reply. I didn't get the second one. Did you mean security>User groups & roles under administration?. The last one was a good one. Thats funny.
Title: Re: Admin Console
Post by: Suraj on 30 Sep 2011 04:37:58 PM
1st suggestion should be enough.
Try that and see.