Disable Admin rights in TM1 Architect

245317177

Hi,

I have configured TM1 security with Cognos BI, and i am able to login TM1 architect with with BI login credentials. But i am unable to view the admin rights in TM1 architect, all options are disabled. Please let me know if any thoughts on this issue.

S/W versions: Cognos BI 10.1.1 and TM1 10.1

Kris

xiaomi1984

will your issue be because of missing Tm1p8.Lic file ? Have a look at the link above see if it is the same issue you are  having.

rampagews3

Krish wrote:I have configured TM1 security with Cognos BI, and i am able to login TM1 architect with with BI login credentials. But i am unable to view the admin rights in TM1 architect, all options are disabled. Please let me know if any thoughts on this issue.

S/W versions:   Cognos BI 10.1.1 and TM1 10.1

Prior to changing your TM1 Server config to integrate with Cognos BI security (IntegratedSecurityMode=4 or IntegratedSecurityMode=5), did you go in and add your Cognos BI login credentials as an Admin group member in TM1 security?  

I'm going from memory a bit here, but you first need to edit the TM1P.INI file and look for and add or update these settings:

Code: AllowImportCAMClients=T
CognosGatewayURI=<your Cognos BI server gateway URL>

You need to do that with TM1 Architect/Perspectives shut down, I believe.  Once you've updated TM1P.INI and restarted TM1 Server running in something like IntegratedSecurityMode=2, you can log back in through Architect as an Admin user and when you go into Clients/Groups and add a client or group you should (if your CognosGatewayURI setting is correct) now get the Cognos BI security UI, allowing you to search for and bring in various groups and users from Cognos security.  At this point you need to add your Cognos BI user and put that user in the TM1 Admin group.  Then, restart TM1 Server with your original IntegratedSecurityMode setting and your Cognos BI user, once logged in, should have the full Admin privileges you're looking for in Architect/Perspectives.  You don't need to do this every time you add users/groups, as long as you have that one Admin group member set up on your TM1 Server.

Regards,
Mike