Apply Security in Framework Manager Guide-I

This is another document for Cognos for Beginners Series. This document provides Overview of Security, Creating Users, Creating Groups or Roles, Set Access Permission, Object level, and Data/Row level security.

Provided By: BISP http://bispsolutions.wordpress.com http://learncognosreports.wordpress.com/

Created By: Mitesh Agrawal Reviewed By: Amit Sharma Team BISP

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Table of Contents
Overview of Security in Framework Manager.......3 Creating Groups and Roles......4 Set Access Permission to User, Groups or Roles...15 Object level Security...21 Row Level/ Data Level Security......26 Security Validation..32

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Overview of Security in Framework ManagerIn IBM Cognos Framework Manager , Security is a way of restricting access to metadata and data. Three types of security in IBM Cognos Framework Manager

Object level security Row/Data level security Package level security

Object level security- Object level security allows you to secure an object directly by allowing or denying users access to the object , or keeping it hidden from all users.
Row/Data level security- Row/Data level security allows you to create a security filter

and apply it to a specific Query Subject. This level of security controls the data that is shown to the user when they build and run their reports. Package level security- Package level security allows you to apply security to a package and identify who has access to that package.

Creating Groups and Roles

Firstly we need to create a Groups Or Roles. After creating Groups or Roles, we will assign Users to them. Steps to create a Groups Or Roles Go to Start All ProgramsIBM Cognos BI Developer Edition IBM

Cognos BI

Developer Edition

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Or Type the following link on the URL of the web browser http://localhost:9300/cognos_developer/manager/main.html Cognos welcome page will appear, In this page Go to Launch IBM Cognos Administration.

Click on Security.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

 Click on Users, Groups and Roles and then click on Cognos Folder.

On the toolbar, click the new Group[

] or new Role[

] button. Here I am creating a

new Group.

Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

 Here we are creating a group without Users. We will assign users to this group later and

click Finish.

We can view the new Group (i.e; sales group) will be appear on the screen in the cognos

folder.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Similarly we can create more Groups or roles. Now we will create a group (i.e; Marketing Group). On the toolbar, click the new Group[ ] or new Role[ ] button.

Specify a name and location to this new group. Here Description and Screen tip are optional and press Next.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

 Here we are creating a group without Users. We will specify users to this group later

and click Finish.

We can view the new Group (i.e; Marketing group) will be appear on the screen in the

cognos folder.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Creating Users For providing a security to users , Firstly we need to create a users. If you have created users previously, no need to create users. To create a user, use the following stepsGo to Start All ProgramsIBM Cognos BI Developer Edition IBM Developer Edition Cognos BI

Or We can simply type http://localhost:9300/cognos_developer/manager/mail.html on the address bar of the browser. Cognos welcome page will appear. In the IBM Cognos BI Developer Edition Manager page ,click Users then Add to add new users. By default it will provide us Administrator user.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

Add User page will appear, To create users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.

After click on green arrow the Selected Entries will be appear in the Selected Entries Pane from Available Entries Pane and press Ok.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

10

You can view that new created user will be appear on the IBM Cognos BI Developer Edition Manager screen, who belongs to sales group . Again to add user, click Add button.

Add User page will appear, To add users, specify Username, Given Name, Surname, Email, Password and also select one of the Entries ( In my case sales group) from Available Entries Pane to this new user and press green arrow button.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

11

 After click on green arrow the Selected Entries will be appear in the Selected Entries

Pane and press Ok.

Again, we can view that new created user will be appear on the screen, who belongs to

sales group. Again to add user, click Add button.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

12

 Similarly, we can create many users. After create users, all the users will be appear on

the IBM Cognos BI Developer Edition Manager Screen with their membership( i.e; Groups or Roles).

Set Access Permissions to Users, Groups or Roles

Set Access Permission for Users, Groups or Roles. We need to do following steps-

Simply type http://localhost:9300/p2pd/servlet/dispatch on the URL of the web browser. Login Page will appear, specify User Id=administrator and Password, if you gave previously during installation time and click Ok

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

13

 Cognos portal page will appear, then Go to Launch IBM Cognos Administration.

lBM Cognos Administration Page will appear, now click on Security .

Click on Cognos folder, because this folder contains all the Groups and Roles.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

14

 Locate the group or roles for which, you want to set access permissions. In the Actions

column, click More.

Perform an Action for this entry Window will appear, click the set properties button [ ] for this entry that will be appear in the Available actions.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

15

 After click the set properties button, Set properties page will appear, now click on

Members. After click on members, the users/members will be appear for sales group, which we have specified previously for sales group.

Now click Permission then Override the access permissions acquired from the parent entry and click Add to grant permission to users, group or roles.

Now click on cognos Folder to select Groups/Roles.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

16

 Click on Show users in the list and select the Groups/Roles from Available Entries Pane

and press green arrow.

After click green arrow , the selected Groups/ Roles will be appear in the Selected Entries Pane and click ok.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

17

Now click the sales group check box and grant Read Permission to Group/Role (In my case sales group) and press ok. We can also Deny access permission to users, groups or roles.

Object Level Security Steps to Add Object level Security Firstly we will login from administrator to Framework Manager.

Go to StartAll ProgramsIBM Cognos BI Developer EditionIBM Cognos Framework Manager.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

18

 Click create a new project and any project which you have created previously and

type User ID= administrator and Password in the corresponding block for authentication. If you provided password during the installation, then write password here ,otherwise keep it blank and click OK.

In the framework manager, expand the Business ViewClick the object , which you

want to grant permission to Users, Groups Or Roles. Here I am selecting Facts, Order, Products and Time object for sales group.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

19

From the Actions menu, click Specify Object Security.

Specify Object Security- Multiple object Selected Page will appear, click Add to add new users, groups or roles.

Select Users and Groups page will appear, now click on cognos folder. This folder contains all the predefined and user defined Group and Roles.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

20

Select Groups or Roles, which we have created previously and press arrow. Here I am selecting a sales group.

green

We can view that selected Entries (Groups/Roles) will be appear in the Selected entries pane from Available entries pane and press Ok.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

21

We can view that selected Groups or Roles will be appear on the screen. Specify security rights for each user, or groups. To grant access to a user, group ,or roles select the Allow check box or select Deny check box to deny access to a user, group or roles and press Ok.

Row Level/ Data Level Security

To specify Row level/ Data level Security ,expand the business view and Select any

Query Subject. Here I am selecting Time Query Subject.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

22

Now click Action Specify Data Security.

Specify Data Security- Time page will appear and click Add Groups button to populate the Query Subject with security filters.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

23

Select Users and Groups Page will appear. To select Groups/Roles, click Cognos Folder.

Now click on Show Users in the List and select the Groups or Roles (In my case sales group) from the Available Entries Pane and press green arrow.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

24

We can view that the Selected Group/Roles will be appearing in the Selected Entries Pane and press ok.

Specify Data Security- Time page will appear, we can view that the group or roles will be appear on the screen.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

25

Click in the box below 'Filter' and select 'Create/Edit Embedded'. This is basically a Security Filter ..

The Filter Definition Window will appear. Expand the Business ViewTime.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

26

Now Select the Per_Name_Year(i.e; Year) Query Item and click blue arrow button.

The Selected Query Item will be appear in the Expression Definition box and press ok.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

27

We can view that the Selected Group/Roles and Filter will be appear on the screen and press Ok.

Security Validation
To Package level Security, first we need to create a package and publish the package. Go

to PackageCreate Package

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

28

 Specify Package Name and press Next. Here Description and Screen tip are optional.

Define the objects , which you want to include in this package from the project.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

29

Select the set of functions that will be available in this package and press arrow.

green

We can view that Selected Function Sets will appear in the Available Functions Sets and click Finish.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

30

 Your package have been successfully created. Now press Yes for open the Publish

Package Wizard otherwise press No.

Publish Wizard Page will appear. By default it will provide us Public Folder location in the content store to this new package. Now press the Folder tab to select a new location to this new package.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

31

Click on cognos link to navigate My Folder.

Click on My Folders and then click ok.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

32

We can view that Package Wizard Location has changed and press Next.

In this window we have to add the security privileges to the packages, which type of

users, groups and roles can access the package ,click the Add button.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

33

Click Cognos Folder.

After click on Cognos ,we can view that groups or roles will be appear om the screen. Here I am selecting a sales group and press green arrow.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

34

 The sales group will be appear in the Selected Entries Pane from Available Entries Pane.

The selected groups and roles(i.e; sales) will be able to use this package and press Next.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

35

Verify the package before publishing it , now press Publish to publish the package.

You have successfully published the package , now click on Exit this wizard and press

Finish.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

36

Note- To view the IBM Cognos Portal Screen typehttp://localhost:9300/p2pd/servlet/dispatch on the URL.
We can view the package ,which we have created previously. Now click Package.

To validate Security , Go to Launch Report Studio.

IBM Cognos Report Studio screen will appear and select the Create new.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

37

Select the type of tool, which you want to use to create the report. Here I am selecting a List tool and press Ok.

The Insertable Objects Pane will appear, we can view that selected object for the granted Users and Group will be appear on the screen. This screen shows us Object level Security.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

38

 Now expand the Time Dimension Query Object, and simply drag the objects from the

Insertable Objects Pane and drop it in the Middle Pane

Click Test button.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

39

By default you will view the report in the HTML format on IBM Cognos viewer, This screen shows us Row/ Data level Security.

Cognos 10 BI Framework Manager Beginners Guide Part I| http://learncognosreports.wordpress.com |BISP

40