Creating a cell security cube

Create a cell security cube to define user group privileges for accessing specific cells in a cube.

About this task

A cell security cube is a type of control cube. Control cubes are generated by IBM® Cognos® TM1® server to perform special tasks.

You assign cell-level security by doing the following:

Creating a cell security control cube that contains the dimensions of the cube whose cell-level security you configure. As of Cognos TM1 10.2 only the dimensions needed to define security are added to the control cube.
Setting security for the appropriate cells in the security control cube by assigning security rights for TM1 security groups.

Use the cell security cube to assign the access privileges that each user group has to specific cells. These access privileges can be one of the following:

READ - group members can only view the cell
WRITE - group members can read and write to the cell
LOCK - group members can view and edit the cell and can permanently lock the cell to prevent other users from updating it
NONE - group members cannot see the cell
RESERVE - group members can view and edit the cell, and can temporarily reserve it to prevent other users from updating it
ADMIN - group members have complete access to the cell

Cell-level security applies to leaf members and generally does not apply to consolidations, although you can use the None and Read security rights to control the display or editing of consolidations.

Procedure

If the control cubes are not already visible, click the Actions menu icon , then click Show Control Objects. The Control Objects folder is displayed.
In the Model Design pane, expand the Cubes folder.
Right-click the cube to which you want to apply cell-level security, and then click Configure Security , Set Access Permissions for , Cube cells.
In the Create cell security cube box, click Yes. The cell security cube appears as a tab in the object viewer.
Note: The security cube view looks similar to the view of the related cube, except for these differences:
- Object viewer differences
  - a key icon appears next to CellSecurity for <cube name> .
  - the Re-order dimensions icon does not appear in the toolbar
  - the Optimize Cube Dimensions icon does not appear in the toolbar
- Property pane differences
  - the value of the Name property is }CellSecurity_cubename
  - a new dimension, }Groups, appears in the dimension list
Drag the two dimensions that share cells to which you want to assign security into the Rows and Columns areas.
Double-click a cell and then select the access privilege you want to assign.
Repeat the previous two steps to assign security to additional cells.

Results

Group members can access the cells according to the cell security that you assigned.