Access Permissions

Setting Permissions for Content.

Set access permissions to specify which users, groups, or roles can access your content.

About this Task

You can set permissions for content that you own, such as reports, dashboards, stories, packages, and so on. Permissions can be granted, denied, or inherited from   a parent entry. See below for the types of permissions that can be granted:

Read:                   

• View all the properties of an entry, including the report specification and report output
• Create a shortcut to an entry

Write:

• Modify properties of an entry,
• Delete an entry
• Create entries in a container, such as a package or a folder,
• Modify the report specification for reports created in Reporting and Query Studios
• Create new outputs for a report
• Process an entry

Execute:

• For entries such as reports, agents, and metrics, the user can run the entry
• For data sources, connections, and signons, the entries can be used to retrieve data from a data The user cannot read the database information directly. The report server can access the database information on behalf of the user to process a request. IBM Cognos software verifies whether users have execute permissions for an entry before they can use the entry
• For credentials, users can permit someone else to use their credentials. To use the run as the owner report option, a user must have execute permissions for the account

Set Policy:

• Read and modify the security settings for an entry

Traverse:

View the contents of a container entry, such as a package or a folder, and view general properties of the container itself without full access to the content.

About this Task

You can set permissions for content that you own, such as reports, dashboards, stories, packages, and so on. Permissions can be granted, denied, or inherited from   a parent entry.

When you set access permissions, you can reference both authentication provider users, groups, and roles, and Cognos groups and roles. However, if you plan to deploy your application in the future, we recommend that you use only the Cognos groups and roles to simplify the process.

Procedure                                                                    

1. In Team content or My content, find your entry, and from its context menu , tap Properties.
   
   
2. On the Permissions tab, select the check box Override parent permissions, and tap the add
   
   
   
   
3. Open the namespace that contains the users, groups, or roles for which you want to specify permissions for the entry. To quickly find the entries, click the search icon, or click the filter  icon to narrow the view of entries within the namespace.
   
   
   
   
4. Select the users, groups, or roles that you need. You can control-select multiple entries. Tap Add. The selected users, groups, or roles are added to the security policy of your entry with the basic permission Read.
   
   
   
   
5. To change the permission to Run, Write, or Full, tap the set access icon, and change the permission.
   
   
   
   
6. Tap on the permission name to view the granular permissions that this permission is comprised of. To change the granular permissions, tap the set access   icon for a permission, and change the access type to grant, deny, or inherit.
7. If you want the children entries inherit the same permissions, select the Apply to all children check box.
   
   
   
   
8. Tap Apply.