IBM® Cognos® 8 Planning - Contributor Administration Guide

Chapter 3: Security
The Planning Rights Administrators role has the Planning Rights Administration capability by
default. To assign this capability to groups, users, or roles, you must give execute permissions to
the appropriate members. You must also give members permissions to traverse the Administration
folder.
Tip: You change capabilities through IBM Cognos Administration, by clicking the Security tab.
For more information, see "Securing Functions and Features" in the Administration and Security
Guide.
Capabilities Needed to Create IBM Cognos 8 Planning Packages
You can create a Planning Package during the Go to Production process, giving users access to IBM
Cognos 8 studios from the Contributor application and enabling users to report against live Con-
tributor data using the Planning Data Service. To do this, the Planning Rights Administrators role
must be granted the Directory capability. Members of the System Administrator role are automat-
ically granted this capability, but Planning Rights Administrator members are not.
Setting up Security for an IBM Cognos 8 Planning Installation
34 Contributor
You must set up security for an IBM Cognos 8 Planning installation.
To configure security for IBM Cognos 8 Planning, do the following:
❑ Using Cognos Configuration, configure IBM Cognos 8 to use an authentication provider
❑ Using IBM Cognos Administration
● add Contributor Administration Console and Analyst administrators to the Planning Rights
Administrators role
● add Contributor application members and Analyst users to the Planning Contributor Users
role
● enable Planning Roles in IBM Cognos 8
● restrict access to the everyone group
● create additional roles or groups for IBM Cognos 8 Planning (optional)
Note: We recommend that you add groups of users as defined in your authentication pro-
vider to the roles in IBM Cognos 8 Planning, rather than individual users. This means that
changes in group membership are reflected immediately in the roles without having to make
changes in IBM Cognos 8
❑ To configure Analyst security:
● configure integrated Windows authentication if you want to execute macros without
interaction
● specify a default library
● assign access at object, library, or item level
❑ Using the Contributor Administration Console