evan ross principal automating security in ibm cognos 8 transformer
TRANSCRIPT
![Page 1: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/1.jpg)
Evan RossPrincipal
Automating Security in
IBMCognos 8
Transformer
![Page 2: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/2.jpg)
IBM Services Partner Expertise in the BI platform for more
than 12 years Cognos BI
Dashboarding
Reporting
Analysis
Scorecarding
Data Manager
![Page 3: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/3.jpg)
Some of our Cognos Clients
![Page 4: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/4.jpg)
Cognos security Great Active Directory integration for
Framework Manager Functionality added in Transformer 8.3
for Custom Views
![Page 5: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/5.jpg)
The problem: Hospital ERP system Complex security by department Security table available in SQL Framework Manager can easily connect
to the SQL table Hard to maintain in Transformer
Security Concerns Timeliness
![Page 6: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/6.jpg)
Standard hierarchies are easy…
![Page 7: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/7.jpg)
…Complex Hierarchies are not!
![Page 8: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/8.jpg)
Transformer views Exclude
Not in cube Cloak
In totals, not visible Suppress
Hide level Summarize
Hide lower levels Apex
Hide upper levels
![Page 9: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/9.jpg)
The manual method
![Page 10: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/10.jpg)
What does the user see? Two options:
Supress all categories at the lowest level and then unsuppress applicable categories
Apex on applicable categories
![Page 11: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/11.jpg)
What is the difference?
![Page 12: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/12.jpg)
The solution Cognos 8.3 and higher allows for OLE
automation of Transformer Model Read SQL database and create User
Views for each class Tools needed:
Transformer Visual Studio – free Express version is fine Does NOT need Cognos SDK!
![Page 13: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/13.jpg)
The next problem – Active Directory names! Security tables uses login
name RossE
Cognos expects full name Ross, Evan
The answer – link directly to Active Directory
![Page 14: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/14.jpg)
Connecting to Active Directory SQL Server supports linking directly to
AD
![Page 15: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/15.jpg)
Once connected, it’s a simple query…Insert Into L_activedirectory Select Cn, Samaccountname From Openquery(adsi, 'Select Cn, Samaccountname From ''Ldap:// Dc1'' Where Objectclass = ''User'' And Objectcategory = ''Person'‘ Order By Givenname') End
![Page 16: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/16.jpg)
Process model to update security
![Page 17: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/17.jpg)
VB.NET code – what does it do?For intX = 1 To dimension.DrillDowns.Item(1). Categories.Count
Dim category As Category = dimension.DrillDowns.Item(1).Categories(intX)
If category.Name = deptName Then
view.SetViewStatus(category,xtrViewStatus.trViewStatusApexAncestor)
End If
Next intX
![Page 18: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/18.jpg)
The end result No manual maintenance of Transformer
security Security preserved in all Cognos tools –
relational, dimensionally modeled relational (DRM), and cubes
No more headaches for BI team!
![Page 19: Evan Ross Principal Automating Security in IBM Cognos 8 Transformer](https://reader036.vdocuments.mx/reader036/viewer/2022062423/56649d1a5503460f949ef317/html5/thumbnails/19.jpg)
Questions? Evan Ross [email protected] 416-987-5793