Download - Appling Security in Cognos10 Part I
![Page 1: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/1.jpg)
Apply Security in
Framework Manager Guide-I
Provided By: BISP Created By: Mitesh Agrawalhttp://bispsolutions.wordpress.com Reviewed By: Amit Sharma http://learncognosreports.wordpress.com/ Team BISP
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 1
This is another document for Cognos for Beginner’s Series. This document provides Overview of Security, Creating Users, Creating Groups or Roles, Set Access Permission, Object level, and Data/Row level security.
![Page 2: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/2.jpg)
Table of Contents
Overview of Security in Framework Manager…. ……………………..…....3
Creating Groups and Roles………….…………………….….……………...4
Set Access Permission to User, Groups or Roles…...………………………15
Object level Security…………………………………………… …..………….21
Row Level/ Data L evel Security……………………………………...……...26
Security Validation…………………………………………… ….…………….32
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 2
![Page 3: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/3.jpg)
Overview of Security in Framework Manager-
In IBM Cognos Framework Manager , Security is a way of restricting access to metadata and data. Three types of security in IBM Cognos Framework Manager-
Object level security
Row/Data level security
Package level security
Object level security- Object level security allows you to secure an object directly by allowing or denying users access to the object , or keeping it hidden from all users.
Row/Data level security- Row/Data level security allows you to create a security filter and apply it to a specific Query Subject. This level of security controls the data that is shown to the user when they build and run their reports.
Package level security- Package level security allows you to apply security to a package and identify who has access to that package.
Creating Groups and Roles
Firstly we need to create a Groups Or Roles. After creating Groups or Roles, we will assign Users to them.
Steps to create a Groups Or Roles-
Go to Start All ProgramsIBM Cognos BI Developer Edition IBM Cognos BI Developer Edition
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 3
![Page 4: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/4.jpg)
Or
Type the following link on the URL of the web browser - http://localhost:9300/cognos_developer/manager/main.html
Cognos welcome page will appear, In this page Go to Launch IBM Cognos Administration.
Click on Security.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 4
![Page 5: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/5.jpg)
Click on Users, Groups and Roles and then click on Cognos Folder.
On the toolbar, click the new Group[ ] or new Role[ ] button. Here I am creating a new Group.
Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 5
![Page 6: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/6.jpg)
Here we are creating a group without Users. We will assign users to this group later and click Finish.
We can view the new Group (i.e; sales group) will be appear on the screen in the cognos folder.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 6
![Page 7: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/7.jpg)
Similarly we can create more Groups or roles. Now we will create a group (i.e;
Marketing Group). On the toolbar, click the new Group[ ] or new Role[ ] button.
Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 7
![Page 8: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/8.jpg)
Here we are creating a group without Users. We will specify users to this group later and click Finish.
We can view the new Group (i.e; Marketing group) will be appear on the screen in the cognos folder.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 8
![Page 9: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/9.jpg)
Creating Users
For providing a security to users , Firstly we need to create a users. If you have created users previously, no need to create users.
To create a user, use the following steps-
Go to Start All ProgramsIBM Cognos BI Developer Edition IBM Cognos BI Developer Edition
Or
We can simply type http://localhost:9300/cognos_developer/manager/mail.html on the address bar of the browser. Cognos welcome page will appear.
In the IBM Cognos BI Developer Edition Manager page ,click Users then Add to add new users. By default it will provide us Administrator user.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 9
![Page 10: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/10.jpg)
Add User page will appear, To create users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.
After click on green arrow the Selected Entries will be appear in the Selected Entries Pane from Available Entries Pane and press ‘Ok’.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 10
![Page 11: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/11.jpg)
You can view that new created user will be appear on the IBM Cognos BI Developer Edition Manager screen, who belongs to sales group . Again to add user, click ‘Add’ button.
Add User page will appear, To add users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 11
![Page 12: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/12.jpg)
After click on green arrow the Selected Entries will be appear in the Selected Entries Pane and press ‘Ok’.
Again, we can view that new created user will be appear on the screen, who belongs to sales group. Again to add user, click ‘Add’ button.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 12
![Page 13: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/13.jpg)
Similarly, we can create many users. After create users, all the users will be appear on the IBM Cognos BI Developer Edition Manager Screen with their membership( i.e; Groups or Roles).
Set Access Permissions to Users, Groups or Roles
Set Access Permission for Users, Groups or Roles. We need to do following steps-
Simply type http://localhost:9300/p2pd/servlet/dispatch on the URL of the web browser. Login Page will appear, specify User Id=administrator and Password, if you gave previously during installation time and click ‘Ok’
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 13
![Page 14: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/14.jpg)
Cognos portal page will appear, then Go to Launch IBM Cognos Administration.
lBM Cognos Administration Page will appear, now click on Security .
Click on Cognos folder, because this folder contains all the Groups and Roles.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 14
![Page 15: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/15.jpg)
Locate the group or roles for which, you want to set access permissions. In the Actions column, click More.
Perform an Action for this entry Window will appear, click the set properties button [
] for this entry that will be appear in the Available actions.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 15
![Page 16: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/16.jpg)
After click the set properties button, Set properties page will appear, now click on Members. After click on members, the users/members will be appear for sales group, which we have specified previously for sales group.
Now click Permission then Override the access permissions acquired from the parent entry and click Add to grant permission to users, group or roles.
Now click on cognos Folder to select Groups/Roles.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 16
![Page 17: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/17.jpg)
Click on Show users in the list and select the Groups/Roles from Available Entries Pane and press green arrow.
After click green arrow , the selected Groups/ Roles will be appear in the Selected Entries Pane and click ok.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 17
![Page 18: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/18.jpg)
Now click the sales group check box and grant Read Permission to Group/Role (In my case sales group) and press ok. We can also Deny access permission to users, groups or roles.
Object Level Security
Steps to Add Object level Security-
Firstly we will login from administrator to Framework Manager.
Go to StartAll ProgramsIBM Cognos BI Developer EditionIBM Cognos Framework Manager.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 18
![Page 19: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/19.jpg)
Click create a new project and any project which you have created previously and type User ID= administrator and Password in the corresponding block for authentication. If you provided password during the installation, then write password here ,otherwise keep it blank and click ‘OK’.
In the framework manager, expand the Business ViewClick the object , which you want to grant permission to Users, Groups Or Roles. Here I am selecting Facts, Order, Products and Time object for sales group.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 19
![Page 20: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/20.jpg)
From the Actions menu, click Specify Object Security.
Specify Object Security- Multiple object Selected Page will appear, click Add to add new users, groups or roles.
Select Users and Groups page will appear, now click on cognos folder. This folder contains all the predefined and user defined Group and Roles.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 20
![Page 21: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/21.jpg)
Select Groups or Roles, which we have created previously and press green arrow. Here I am selecting a sales group.
We can view that selected Entries (Groups/Roles) will be appear in the Selected entries pane from Available entries pane and press ‘Ok’.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 21
![Page 22: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/22.jpg)
We can view that selected Groups or Roles will be appear on the screen. Specify security rights for each user, or groups. To grant access to a user, group ,or roles select the Allow check box or select Deny check box to deny access to a user, group or roles and press ‘Ok’.
Row Level/ Data Level Security
To specify Row level/ Data level Security ,expand the business view and Select any Query Subject. Here I am selecting Time Query Subject.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 22
![Page 23: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/23.jpg)
Now click Action Specify Data Security.
Specify Data Security- Time page will appear and click Add Groups button to populate the Query Subject with security filters.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 23
![Page 24: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/24.jpg)
Select Users and Groups Page will appear. To select Groups/Roles, click Cognos Folder.
Now click on Show Users in the List and select the Groups or Roles (In my case sales group) from the Available Entries Pane and press green arrow.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 24
![Page 25: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/25.jpg)
We can view that the Selected Group/Roles will be appearing in the Selected Entries Pane and press ok.
Specify Data Security- Time page will appear, we can view that the group or roles will be appear on the screen.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 25
![Page 26: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/26.jpg)
Click in the box below 'Filter' and select 'Create/Edit Embedded'. This is basically a Security Filter ..
The Filter Definition Window will appear. Expand the Business ViewTime.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 26
![Page 27: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/27.jpg)
Now Select the Per_Name_Year(i.e; Year) Query Item and click blue arrow button.
The Selected Query Item will be appear in the Expression Definition box and press ok.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 27
![Page 28: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/28.jpg)
We can view that the Selected Group/Roles and Filter will be appear on the screen and press ‘Ok’.
Security Validation
To Package level Security, first we need to create a package and publish the package. Go to PackageCreate Package
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 28
![Page 29: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/29.jpg)
Specify Package Name and press ‘Next’. Here Description and Screen tip are optional.
Define the objects , which you want to include in this package from the project.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 29
![Page 30: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/30.jpg)
Select the set of functions that will be available in this package and press green arrow.
We can view that Selected Function Sets will appear in the Available Functions Sets and click Finish.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 30
![Page 31: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/31.jpg)
Your package have been successfully created. Now press ’Yes’ for open the Publish Package Wizard otherwise press ’No’.
Publish Wizard Page will appear. By default it will provide us Public Folder location in the content store to this new package. Now press the Folder tab to select a new location to this new package.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 31
![Page 32: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/32.jpg)
Click on cognos link to navigate My Folder.
Click on My Folders and then click ok.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 32
![Page 33: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/33.jpg)
We can view that Package Wizard Location has changed and press Next.
In this window we have to add the security privileges to the packages, which type of users, groups and roles can access the package ,click the ’Add’ button.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 33
![Page 34: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/34.jpg)
Click Cognos Folder.
After click on Cognos ,we can view that groups or roles will be appear om the screen. Here I am selecting a sales group and press green arrow.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 34
![Page 35: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/35.jpg)
The sales group will be appear in the Selected Entries Pane from Available Entries Pane.
The selected groups and roles(i.e; sales) will be able to use this package and press Next.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 35
![Page 36: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/36.jpg)
Verify the package before publishing it , now press ‘Publish’ to publish the package.
You have successfully published the package , now click on ‘Exit this wizard’ and press ‘Finish’.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 36
![Page 37: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/37.jpg)
Note- To view the IBM Cognos Portal Screen type- http://localhost:9300/p2pd/servlet/dispatch on the URL.
We can view the package ,which we have created previously. Now click Package.
To validate Security , Go to Launch Report Studio.
IBM Cognos Report Studio screen will appear and select the Create new.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 37
![Page 38: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/38.jpg)
Select the type of tool, which you want to use to create the report. Here I am selecting a List tool and press Ok.
The Insertable Objects Pane will appear, we can view that selected object for the granted Users and Group will be appear on the screen. This screen shows us Object level Security.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 38
![Page 39: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/39.jpg)
Now expand the Time Dimension Query Object, and simply drag the objects from the Insertable Objects Pane and drop it in the Middle Pane
Click Test button.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 39
![Page 40: Appling Security in Cognos10 Part I](https://reader031.vdocuments.net/reader031/viewer/2022020115/5415522b7bef0a7d3f8b472b/html5/thumbnails/40.jpg)
By default you will view the report in the HTML format on IBM Cognos viewer, This screen shows us Row/ Data level Security.
Cognos 10 BI Framework Manager Beginner’s Guide Part I| http://learncognosreports.wordpress.com |BISP 40