IntegratedSecurityMode

This parameter sets the user authentication mode to be used by the Planning Analytics database.

This parameter is not applicable to Planning Analytics Engine.

Parameter type: optional, dynamic

Although the parameter name focuses on Integrated Security Mode, the security modes are used to set other kinds of security.

Note: If you change the security mode without restarting the Planning Analytics database., the change applies only to new client connections. If you want to ensure that all clients are authenticated with the new security mode, all clients must be logged off by the administrator.

Use the following format to set this parameter:

IntegratedSecurityMode=x

where x can be a value for one of the following security modes.

Note: Security mode 5 is the only mode supported for Planning Analytics Workspace on Cloud.
Table 1. Security modes

Security Mode

Description

1

The server uses secure mode (standard Planning Analytics security).

With this authentication, the Planning Analytics database. checks the user name and password against the user names and passwords in the Planning Analytics database.

2

This mode allows you to switch back and forth between integrated login and native Planning Analytics security.

3

The database uses Integrated Login.

Integrated Login uses Microsoft Windows network authentication to control access to Planning Analytics data.

If you use this security mode, you must also set the SecurityPackageName parameter.

4

The database uses IBM® Cognos® Analytics security authentication.

Considerations when using this mode:

In Planning Analytics database, Cognos Analytics users can belong only to Cognos Analytics groups and any of these predefined Planning Analytics administrator groups (ADMIN, DataAdmin, SecurityAdmin, and OperationsAdmin). Membership in Planning Analytics user (non-administrator) groups is not supported for Cognos Analytics users when they log in to TM1® Server.

You can not use Planning Analytics database to permanently assign a Cognos Analytics user to another Cognos Analytics group. Any user assignment you make in Planning Analytics database to a Cognos Analytics group is not saved back to Cognos Analytics. When a Cognos Analytics user logs in to Planning Analytics database, the group assignments in Cognos Analytics override any Cognos Analytics group assignments made in Planning Analytics database.

5

The database uses Cognos Analytics security authentication and supports user groups from both Planning Analytics database and Cognos Analytics.

Security mode 5 is the only mode supported for Planning Analytics Workspace on Cloud.

Use security mode 5 when you are running IBM Cognos TM1 Applications with Cognos Analytics security.

Considerations when using this mode:

  • In Planning Analytics database, Cognos Analytics users can belong to both Cognos Analytics and Planning Analytics groups.
  • You can not use Planning Analytics database to permanently assign a Cognos Analytics user to another Cognos Analytics group. Any user assignment you make in Planning Analytics database to a Cognos Analytics group is not saved back to Cognos Analytics. When a Cognos Analytics user logs in to Planning Analytics database, the group assignments in Cognos Analytics override any Cognos Analytics group assignments made in Planning Analytics database.
  • If IntegratedSecurityMode=5 is used for the Planning Analytics database and IBM Cognos TM1 Applications, it is not possible to assign rights to native Planning Analytics groups within the Manage rights dialog. Only Cognos Groups, imported into the Planning Analytics database, are available.