COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: AmandineMak on 26 Sep 2024 03:54:46 AM

Title: Unable to remove New report access to user
Post by: AmandineMak on 26 Sep 2024 03:54:46 AM
Hello,

I just installed Cognos 11.2.4 for my client and I never had this many problem to remove access to users.
All users are able to create a new report as the picture here :
(https://i.postimg.cc/jjDChYTn/nexreport.png)

All User are in groups (managed by my ADLDS) and they are only in the "Customer" Group. They are not part of any other group in the administration panel.
I tried in the Manage > Capabilities to remove any "Creating" possibilities but I can't remove too much, otherwise they would just not be able to read/run report.
Also in the Manage > I tried to go to Account > Customers > Customized > Features > Navigation Bar, but there's nothing to uncheck
Do you have any idea where I can remove this access  ?

Thanks a lot
Title: Re: Unable to remove New report access to user
Post by: MFGF on 26 Sep 2024 07:28:14 AM
Quote from: AmandineMak on 26 Sep 2024 03:54:46 AMHello,

I just installed Cognos 11.2.4 for my client and I never had this many problem to remove access to users.
All users are able to create a new report as the picture here :
(https://i.postimg.cc/jjDChYTn/nexreport.png)

All User are in groups (managed by my ADLDS) and they are only in the "Customer" Group. They are not part of any other group in the administration panel.
I tried in the Manage > Capabilities to remove any "Creating" possibilities but I can't remove too much, otherwise they would just not be able to read/run report.
Also in the Manage > I tried to go to Account > Customers > Customized > Features > Navigation Bar, but there's nothing to uncheck
Do you have any idea where I can remove this access  ?

Thanks a lot

Did you check the memberships of the default Cognos roles in the Cognos namespace? Often the 'Everyone' group belongs to a collection of roles (including the System Administrator role) out of the box. This grants the capabilities of these roles to everyone. I'm guessing this is what's going on here?

Cheers!

MF.
Title: Re: Unable to remove New report access to user
Post by: AmandineMak on 26 Sep 2024 09:01:14 AM
Yes, I removed any group other than admin one from all other groups (outside Customers) in Security > Directory > Cognos .
Users doesn't have access to the administration panel for exemple.