You can control access to TM1 objects by assigning specific levels of object security to a TM1 group. Each object type in TM1 can be assigned specific level of security. For example, cubes, dimension, processes, applications, chores etc.

Basic security in TM1 can be defined in 3 steps:

Creating and managing clients
Assigning clients to groups
Defining security for groups

NOTE: Remember, you can not apply security directly at user level. Users are added into groups and security is then defined on groups.

Creating and managing Clients

Launch your TM1 app server (If you’re subsequent this series you would already have setup TM1Beginner app server). Login to the server, right click on server icon and go to Security > Clients/Groups …

The security editor will open.

Go to Clients > Add new Client and assign a name TestClient to the new client.

Similarly add a group TestGroup too.

Assigning clients to groups

Now against TestClient and TestGroup you’d notice a check box. Click on it. Then notice that there’s a heading Password under security settings. In front of TestClient, you’d notice Undefined. Click on it and enter 1234 as your password and hit enter. It will ask you to confirm the password so reenter it and press OK. Undefined will change into Defined now.

Our Testclient has been created and has been added to TestGroup. We’ll now apply security to TestGroup.

Defining Security for Groups

NOTE: This section is specific to TM1Beginner server that we’ve been using all along this series. If you don’t have it either set it up and create all objects that we’ve created in this series, or just read the concept from this section and apply it on your corresponding objects.

Go to Cubes in Architect, right click and go to Security Assignments …

Assign TestGroup the Read access to Products cube and write access to Products2 cube. For remaining cubes, set none access and click OK.

Similarly, if you wanted you could do the same thing for dimensions too. If user must not access some dimensions, you could go to Dimensions and apply dimension level security to those dimensions. For now, we’ll skip this

So, our TestGroup (and hence all clients which are added in this group. e.g. TestClient) will just be able to see Products cube and will be able to write Products2 cube. But what if we don’t want the group to write actuals data? This data will be loaded directly. So, we need to restrict specifically Actuals dimension item of Version dimension. We do this by applying element level security in TM1.

Go to Versions dimension in Architect. Right click and go Security > Element Security Assignments …

Click on Write against Actuals and then from bottom, select Read.

Click Save and OK.

Next, we’ll assign the security of Processes. The testGroup must not have access to any processes because running processes is work of an Admin not users. We’ll restrict TestGroup’s access to None for processes.

Right click on Processes and select Security Assignments…

You’ll notice that the default access for TestGroup must already be coming as None. If it’s not, then change it to none and click OK.

This way you can right click on any object type and assign security in TM1.

Verify the Assigned Security

Log off from your admin account and login using:

Username: TestClient

Password: 1234

Press F5 to refresh the Architect view.

In Architect, you’ll see that you only have access to Products and Products2 cube. You don’t have access to any processes. Double click on Products2 cube. You will see that you have write access to budget version. Now go to Actuals version and verify that you just have a read access on that version.

This concludes on Security in TM1.

Assignment

Apply security on Applications. Disable all applications for TestGroup and verify the changes. Then give read access to Products2 cube and verify the change.

So, this brings us to the end of blog. This Tecklearn ‘How to Configure Security in TM1’ blog helps you with commonly asked questions if you are looking out for a job in Cognos TM1. If you wish to learn Cognos TM1 and build a career in Business Intelligence domain, then check out our interactive, Cognos TM1 Training, that comes with 24*7 support to guide you throughout your learning period. Please find the link for course details:

https://www.tecklearn.com/course/cognos-tm1/

Cognos TM1 Training

About the Course

Tecklearn’s Cognos TM1 training will make you proficient in building and configuring models in Cognos TM1 using performance modeler tool. Some of the topics included in this Cognos TM1 training are creation and configuration of TM1 servers, building Cubes and Views, creating dimensions, deploying Turbo Integrator for loading and maintaining data and transferring data using scripts. etc., in working with real-time projects, and this will enable you to become a certified Cognos TM1 developer.

Why Should you take Cognos TM1 Training?

The Average salary for a Cognos TM1 Developer is $117,816 per annum – ZipRecruiter.com.
Cognos TM1 has a market share of about 11.87%.
Solution that is owned by Financial and Business analysts, with limited IT involvement, but consistent with IT’s governance.

Curriculum

Introduction to Cognos TM1

Concepts of Multi-dimensional OLAP database
Cognos TM1 Installation
TM1 Servers and Services
TM1 Workflow
TM1 User Interfaces
Turbo Integrator

Cognos TM1 Configuration

Managing TM1 Components and Tasks
Operations on TM1 Servers: Start, Stop and adding TM1 Servers
TM1 Web, Applications and Operations Console
Using Command prompt create or delete Desktop/Windows services
Hands On

Creating Dimensions

Manual creation of Dimensions
Create Product Dimensions and Measure Dimensions
Dynamic Subset Creation
Sparse and Dense Dimensions
Using Turbo Integrator ETL create cubes, review Cubes and Dimensions
Create Subset, assign Subset, Dimensional Manipulation
Performance Monitoring
Control Cubes
TM1 Web and Rules in TM1
Cube related attributes, dimension related attributes
Hands On

Building Cubes and Views

Building Cubes
Building Views
Bulk Load Mode
Creating Data Source through TM1 Turbo Integrator
Hands On

TM1 Security

Various security levels including Server level, Cube level, Dimension level
Concepts of Security in TM1
Creation of Client & Group and access privileges
Cube Level Security
Hands On

TM1 Data Spreading

TM1 Data Spreading and Recreating dimension
Attributes element types
Cube control elements
Dimension elements
Drill Assignment rules
Trace a feeder and feed strings
Hands On

Cognos TM1 Rules

Understanding TM1 rules
TM1 Rules Editor and Rules compilation using functions
Rule performance optimization
Element information rules functions
Cube manipulation Turbo Integrator functions
D-type in TM1
ELCOMP & ELISCOMP Functions
ELISPAR & ELWEIGHT Functions
Hands On

Advanced Scripting with Turbo Integrator

Advanced Scripting with Turbo Integrator
Deploying Dimension subsets and attributes
Editing procedures using scripts
Hands On

Advanced Modelling Techniques

Significance of advanced modelling
Manually adding objects to application design
Understanding application views, dimensions and hierarchy
Virtual cubes, Lookup cubes and spread profile cube
Hands On

TM1 Application Web

TM1 Web Applications
Creating TM1 Application
Working with TM1 Application Web
Snapshots in TM1 application
Adding MDX filters and Action button properties
Active forms, TM1 user and data formatting range
Hands On

645