setup cognos to work with OLAP MSAS cubes security
Par jb le mercredi 26 août 2009, 20:38 - Décisionnel - Lien permanent
Usually, when we create a data source in Cognos, it is easier to specify a connection using Cognos Service Credentials. This means that all connections to the data source are done using the Cognos service user's profile.
- Advantage of this method is that it needs less setup on the corresponding database server (only one account).
- Disadvantage is that you cannot make use of "row level security" as all Cognos users will connect using the same profile (Data source has no information about current Cognos user).
To take advantage of an eventual user level security setup behind Cognos data sources, we need to connect using the current Cognos user's profile.
In the following example, we are editing a Microsoft Analysis services data source. We will setup that Cognos connection so that user's own credentials are transmitted to the database server:
- Remove SSO : just because it didn't work for me when combined with MSAS active directory connections to data sources, on Cognos 8.2. It may work on later releases… If someone can help, let me know :).
- Using the portal, change connection's setup so that it uses an external namespace (AD).
- In Cognos directory, select data sources tab and click on the
connection
- On the connexion page, click on the properties icon to edit
parameters.
- On connection string, click on the pen icon to edit credentials.
- In the connection string, we change from "Cognos 8 service credentials" to
"External Namespace: Active Directory". Then click OK on each page to
validate.
