25.06.2013 Views

IBM® Cognos® 8 Planning - Contributor Administration Guide

IBM® Cognos® 8 Planning - Contributor Administration Guide

IBM® Cognos® 8 Planning - Contributor Administration Guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 3: Security<br />

Members of the required users, groups, or roles now have access schedule and run <strong>Contributor</strong><br />

macros in IBM Cognos Connection.<br />

Assign Scheduler Credentials<br />

44 <strong>Contributor</strong><br />

All scheduled macros, and some jobs, run under the identity setup in the IBM Cognos scheduler or<br />

the scheduler credentials for other schedulers. This is because macros and jobs that run in the<br />

background cannot prompt the user for authentication information. Scheduler credentials are also<br />

used to lookup <strong>Contributor</strong> email addresses from workflow pages.<br />

Scheduler credentials are associated with an authenticated user, which can include more than one<br />

user logged on to different namespaces. The user, or group or role that they are a member of, must<br />

have rights granted in the Access Rights window to run macros, jobs, and lookup email addresses.<br />

If there are users from multiple namespaces in your application, you must have scheduler credentials<br />

associated with those namespaces. When the Validate Users job is run, the scheduler credentials<br />

must be associated with all the namespaces you imported users from. If you are logged on to only<br />

one namespace, users that belong to other namespaces are considered invalid.<br />

Macros that are run directly from the <strong>Contributor</strong> <strong>Administration</strong> Console through user interaction<br />

run under the currently logged on user account and do not use the scheduler credentials. Macros<br />

that are triggered through events run under the identity used to create the event, not the scheduler<br />

credentials.<br />

Only users who have the <strong>Planning</strong> Rights Administrator capability can modify the scheduler creden-<br />

tials. By default, the scheduler credentials are associated with the user who opens the <strong>Contributor</strong><br />

<strong>Administration</strong> Console for the first time, if that user is a <strong>Planning</strong> Rights Administrator. If that<br />

user is not a <strong>Planning</strong> Rights Administrator, a message states that the credentials are invalid, or do<br />

not exist, and a <strong>Planning</strong> Rights Administrator must update the scheduler credentials.<br />

Note that the following <strong>Contributor</strong> jobs use the scheduler credentials:<br />

● Validate Users<br />

● Reconcile<br />

Steps<br />

1. In the Systems Settings pane, click the Scheduler Credentials tab, and click Update.<br />

2. Click Logon.<br />

Initially, the Logon As button is disabled.<br />

3. Enter the User ID and password to be used as the scheduler credentials and click OK.<br />

4. If your logon is successful, the Logon button is disabled, and the Logon as button is enabled.<br />

This enables you to log on to different namespaces.<br />

You must provide scheduler credentials for all namespaces that users of the applications are<br />

imported from.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!