User accounts for running Cognos TM1 services on Windows

When you use IBM® Cognos® Configuration to start the Cognos TM1® Admin Server and Cognos TM1 Server, they are registered to run as Windows services using the predefined Microsoft Windows Local System Account. You should manually change these services to run under a specific user account.

Run Cognos TM1 services under a specific Windows user account

By default, Cognos Configuration registers the following Cognos TM1 services to run under the Microsoft Windows Local System Account:

Cognos TM1 Admin Server
Cognos TM1 Server

Important: Change these Cognos TM1 services to run under a specific user account on Microsoft Windows.

For details on how to change the account for a Cognos TM1 component running as a Windows service, see Changing Cognos TM1 services to run as a specific user account on Windows.

After making these changes, you will still be able to use Cognos Configuration to start and stop these services.

Required privileges for a specific Windows user account

The user account for running Cognos TM1 services on Windows should be a member of the Local Administrator group and also be included in the database owner group to access SQL tables and views.

The account must have the following privileges on the local machine:

Note: Not all of these properties are available in all versions of Windows, such as Windows Server 2008 R2 and newer. Refer to Microsoft Windows documentation for the currently available properties.

Act as part of the operating system
Bypass traverse checking
Increase quotas (Adjust memory quotas for a process)
Replace a process level token
Log on as a service
Have read and write privileges on the Windows Registry item

Use the Security Settings and Group Policy features in Microsoft Windows to configure these security privileges. For example, in Microsoft Windows 7, click Administrative Tools > Local Security Policy, and then click to expand Security Settings > Local Policies > User Rights Assignment.

To set read and write privileges for the Windows Registry, use the Windows Registry editor.