Cognos user groups and permissions

Permissions in Cognos are determined by the IBM Sterling® Order Management System groups in which the user belongs.

IBM Sterling Order Management System supports following Cognos user groups:

  • BI_USER - Users that belong to this group in IBM Sterling Order Management System have permission to log in to Cognos and run existing reports. However, they cannot create new reports or other content.
  • BI_AUTHOR - Users that belong to this group in IBM Sterling Order Management System have permission to log in to Cognos and author reports. Additionally, users can publish new or modified versions of a custom model.
  • BI_DATA_MANAGER - Users that belong to this group in IBM Sterling Order Management System have the permission to log in to Cognos and manage permissions for folders and reports that belong to their organization. Users can restrict access to specific reports or folders to individual users or to all members of specific groups. A BI_DATA_MANAGER can see all groups that are created in IBM Sterling Order Management System and all users that belong to those groups, provided those users can log in to Cognos. These users are not automatically part of all groups unless they also have the Business Intelligence Admin resource permission in IBM Sterling Order Management System.
  • All other IBM Sterling Order Management System groups - These groups do not automatically have special importance in Cognos. However, a user who belongs to the BI_DATA_MANAGER group can make these groups meaningful by limiting access to specific folders or reports for a group or set of groups.
Notes:
  • A user must belong to one or more of the mentioned BI_ groups to access Cognos. A user with the Business Intelligence Admin resource permission belongs to all OMS groups automatically, and this is reflected in the BI_DATA_MANAGER's view. However, the BI_AUTHOR and BI_USER groups have conflicting privileges. The BI_AUTHOR group grants authoring access whereas BI_USER group denies it. Therefore, a user who belongs to both these groups in IBM Sterling Order Management System, belongs only to the BI_AUTHOR group in Cognos.
  • Additionally, the user group and user lists are only refreshed at the time of Cognos login. If changes are made in IBM Sterling Order Management System after a user logs in, the user must log out of Cognos and log back in to see these changes.