How to Configure Security in TM1

Last updated on Sep 27 2021
Rahul Nair

Table of Contents

How to Configure Security in TM1

Introduction to Security in TM1

You can control access to TM1 objects by assigning specific levels of object security to a TM1 group. Each object type in TM1 can be assigned specific level of security. For example, cubes, dimension, processes, applications, chores etc.

Basic security in TM1 can be defined in 3 steps:

  1. Creating and managing clients
  2. Assigning clients to groups
  3. Defining security for groups

NOTE: Remember, you can not apply security directly at user level. Users are added into groups and security is then defined on groups. 

Creating and managing Clients

Launch your TM1 app server (If you’re subsequent this series you would already have setup TM1Beginner app server). Login to the server, right click on server icon and go to Security > Clients/Groups …

Page 1 Image 1 45
Clients/Groups

The security editor will open.

Page 2 Image 2 42
security editor

Go to Clients > Add new Client and assign a name TestClient to the new client.

Page 2 Image 3 21
TestClient

Similarly add a group TestGroup too.

Page 2 Image 4 3
group TestGroup

Assigning clients to groups

Now against TestClient and TestGroup you’d notice a check box. Click on it. Then notice that there’s a heading Password under security settings. In front of TestClient, you’d notice Undefined. Click on it and enter 1234 as your password and hit enter. It will ask you to confirm the password so reenter it and press OK. Undefined will change into Defined now.

Page 3 Image 5 15
Defined

Our Testclient has been created and has been added to TestGroup. We’ll now apply security to TestGroup.

Defining Security for Groups

NOTE: This section is specific to TM1Beginner server that we’ve been using all along this series. If you don’t have it either set it up and create all objects that we’ve created in this series, or just read the concept from this section and apply it on your corresponding objects.

Go to Cubes in Architect, right click and go to Security Assignments …

Page 3 Image 6 4
Security Assignments

Assign TestGroup the Read access to Products cube and write access to Products2 cube. For remaining cubes, set none access and click OK.

Similarly, if you wanted you could do the same thing for dimensions too. If user must not access some dimensions, you could go to Dimensions and apply dimension level security to those dimensions. For now, we’ll skip this

So, our TestGroup (and hence all clients which are added in this group. e.g. TestClient) will just be able to see Products cube and will be able to write Products2 cube. But what if we don’t want the group to write actuals data? This data will be loaded directly. So, we need to restrict specifically Actuals dimension item of Version dimension. We do this by applying element level security in TM1.

Go to Versions dimension in Architect. Right click and go Security > Element Security Assignments …

Click on Write against Actuals and then from bottom, select Read.

Page 4 Image 7 12
select Read

Click Save and OK.

Next, we’ll assign the security of Processes. The testGroup must not have access to any processes because running processes is work of an Admin not users. We’ll restrict TestGroup’s access to None for processes.

Right click on Processes and select Security Assignments…

You’ll notice that the default access for TestGroup must already be coming as None. If it’s not, then change it to none and click OK.

This way you can right click on any object type and assign security in TM1.  

Verify the Assigned Security

Log off from your admin account and login using:

Username: TestClient

Password: 1234

Press F5 to refresh the Architect view.

In Architect, you’ll see that you only have access to Products and Products2 cube. You don’t have access to any processes. Double click on Products2 cube. You will see that you have write access to budget version. Now go to Actuals version and verify that you just have a read access on that version.

This concludes on Security in TM1.

Assignment

Apply security on Applications. Disable all applications for TestGroup and verify the changes. Then give read access to Products2 cube and verify the change.

So, this brings us to the end of blog. This Tecklearn ‘How to Configure Security in TM1’ blog helps you with commonly asked questions if you are looking out for a job in Cognos TM1. If you wish to learn Cognos TM1 and build a career in Business Intelligence domain, then check out our interactive, Cognos TM1 Training, that comes with 24*7 support to guide you throughout your learning period. Please find the link for course details:

https://www.tecklearn.com/course/cognos-tm1/

Cognos TM1 Training

About the Course

Tecklearn’s Cognos TM1 training will make you proficient in building and configuring models in Cognos TM1 using performance modeler tool. Some of the topics included in this Cognos TM1 training are creation and configuration of TM1 servers, building Cubes and Views, creating dimensions, deploying Turbo Integrator for loading and maintaining data and transferring data using scripts. etc., in working with real-time projects, and this will enable you to become a certified Cognos TM1 developer.

Why Should you take Cognos TM1 Training?

  • The Average salary for a Cognos TM1 Developer is $117,816 per annum – ZipRecruiter.com.
  • Cognos TM1 has a market share of about 11.87%.
  • Solution that is owned by Financial and Business analysts, with limited IT involvement, but consistent with IT’s governance.

Curriculum

Introduction to Cognos TM1

  • Concepts of Multi-dimensional OLAP database
  • Cognos TM1 Installation
  • TM1 Servers and Services
  • TM1 Workflow
  • TM1 User Interfaces
  • Turbo Integrator

Cognos TM1 Configuration

  • Managing TM1 Components and Tasks
  • Operations on TM1 Servers: Start, Stop and adding TM1 Servers
  • TM1 Web, Applications and Operations Console
  • Using Command prompt create or delete Desktop/Windows services
  • Hands On

Creating Dimensions

  • Manual creation of Dimensions
  • Create Product Dimensions and Measure Dimensions
  • Dynamic Subset Creation
  • Sparse and Dense Dimensions
  • Using Turbo Integrator ETL create cubes, review Cubes and Dimensions
  • Create Subset, assign Subset, Dimensional Manipulation
  • Performance Monitoring
  • Control Cubes
  • TM1 Web and Rules in TM1
  • Cube related attributes, dimension related attributes
  • Hands On

Building Cubes and Views

  • Building Cubes
  • Building Views
  • Bulk Load Mode
  • Creating Data Source through TM1 Turbo Integrator
  • Hands On

TM1 Security

  • Various security levels including Server level, Cube level, Dimension level
  • Concepts of Security in TM1
  • Creation of Client & Group and access privileges
  • Cube Level Security
  • Hands On

TM1 Data Spreading

  • TM1 Data Spreading and Recreating dimension
  • Attributes element types
  • Cube control elements
  • Dimension elements
  • Drill Assignment rules
  • Trace a feeder and feed strings
  • Hands On

Cognos TM1 Rules

  • Understanding TM1 rules
  • TM1 Rules Editor and Rules compilation using functions
  • Rule performance optimization
  • Element information rules functions
  • Cube manipulation Turbo Integrator functions
  • D-type in TM1
  • ELCOMP & ELISCOMP Functions
  • ELISPAR & ELWEIGHT Functions
  • Hands On

Advanced Scripting with Turbo Integrator

  • Advanced Scripting with Turbo Integrator
  • Deploying Dimension subsets and attributes
  • Editing procedures using scripts
  • Hands On

Advanced Modelling Techniques

  • Significance of advanced modelling
  • Manually adding objects to application design
  • Understanding application views, dimensions and hierarchy
  • Virtual cubes, Lookup cubes and spread profile cube
  • Hands On

TM1 Application Web

  • TM1 Web Applications
  • Creating TM1 Application
  • Working with TM1 Application Web
  • Snapshots in TM1 application
  • Adding MDX filters and Action button properties
  • Active forms, TM1 user and data formatting range
  • Hands On

 

0 responses on "How to Configure Security in TM1"

Leave a Message

Your email address will not be published. Required fields are marked *