Defining a Cognos user to function as a Cognos TM1 administrator

To successfully administer IBM® Cognos® TM1® while using IBM Cognos Business Intelligence (BI) security for authentication, an existing Cognos user must be added to the Cognos TM1 ADMIN group.

This Cognos user will be used to import Cognos groups into Cognos TM1 .

Important: The initial steps for this configuration must be done with the Cognos TM1 IntegratedSecurityMode parameter set to 1. You then change this parameter to use Cognos BI security at a later point in the steps.

Procedure

  1. Log in to Cognos TM1 as an administrator.
  2. From the Server Explorer, click Server > Security > Clients/Groups.
  3. From the Clients/Groups dialog box, click Clients > Add New Client.

    The Cognos logon dialog box appears.

  4. Enter your Cognos user ID and password, then click OK.
  5. In the Name box, click the namespace to which you are currently logged in.
    Note: Only users from the namespace to which you are logged in can be imported into Cognos TM1 . Other namespaces may appear in the Name box, but you cannot import users from them.

    The contents of the Name box update to display the directories available on the selected namespace.

  6. Enable the Show users in the list option.
  7. Navigate to the directory containing the Cognos user you want to define as a Cognos TM1 administrator. In most circumstances, you will define your own Cognos user as a Cognos TM1 administrator, as you must know the Cognos user's ID and password to complete administrative tasks.
  8. Select the user.
  9. Click the green arrow icon green arrow pointing from left to right to move the selected user to the Selected Entries list.
  10. Click OK to import the Cognos user into Cognos TM1 .

    The user appears as a new client in the Client/Groups window, but is not assigned to any Cognos TM1 groups.

  11. Assign the new user to the ADMIN group and click OK.
  12. Shut down the Cognos TM1 server .
  13. Open the Tm1s.cfg configuration file in a text editor.
  14. Set the IntegratedSecurityMode parameter to indicate that the server should use IBM Cognos authentication. The exact parameter value depends on the specific Cognos TM1 components you are using:
    • If you are not using the Cognos TM1 Applications component, set the parameter to 4.
      IntegratedSecurityMode=4
    • If you are using Cognos TM1 Applications with Cognos security, set the parameter to 5 to support user groups from both Cognos TM1 and Cognos.
      IntegratedSecurityMode=5
  15. Save and close Tm1s.cfg.
  16. Restart the Cognos TM1 server .
Parent topic: Managing TM1 users, groups, and objects when using Cognos security