Managing Cognos Security Roles and Data Amanda Sciarra

Managing Cognos Security Roles and Data Amanda Sciarra Sarah Brown 2018 19 th Annual PABUG Conference

CPE Credits • To receive CPE credits for this session (if eligible), complete the CPE Attendance Form on the PABUG Annual Conference website http: //pabug. org/events/cpe-credits/ • For additional questions please contact Lora Harper CPE - Coordinator http: //pabug. org/contact-us/ 2018 19 th Annual PABUG Conference

• Founded by Jesuits in 1851 • Philadelphia’s Jesuit Catholic University • Approximately 8, 000 students enrolled in undergraduate and graduate programs • Home of the Hawk mascot - THWND 2018 19 th Annual PABUG Conference

Cognos Journey • Cognos 11 upgrade Cognos 10 upgrade Launch – Cognos 8 2018 19 th Annual PABUG Conference

Cognos 8 Launch • Delivered an Academic Dashboard & 22 reports • Security based on folders and sub-folders • Data Stewards approved of roles and requested new access • Custom built data level security (fine-grained access) for the student data 2018 19 th Annual PABUG Conference

Cognos 8 Security Setup Issues Writer roles naming convention was unclear and not consistent Groups and roles were complicated No way to easily audit users in groups or roles 2018 19 th Annual PABUG Conference

2018 19 th Annual PABUG Conference

On Demand Reports 2018 19 th Annual PABUG Conference

Fine-Grained Access (FGA) • Managed in Banner by custom form (SZADEPT) • Automatically enforced at the database level (Oracle) • Limits access by rows in the table • Applied to a table 2018 19 th Annual PABUG Conference

SZADEPT 2018 19 th Annual PABUG Conference

Cognos 10 • Began using Ellucian delivered FGA for Finance & HR • Continued to add reports, dashboards, and build folder structure 2018 19 th Annual PABUG Conference

Cognos 11 – Nov. 26 Launch! • New folder structure that was more aligned with departments • Security based on highest level • Strictly using Groups • Writers and Consumer roles are still separated • Fine-grained is still in place 2018 19 th Annual PABUG Conference

Cognos Roles • Writers and Consumers in separate roles – Consumer groups are folder-based and will now be USR_C_[folder area prefix]_[folder], examples: • USR_C_ADV_ATHL (Advancement > Athletics) • USR_C_FHR_BUDGET_ANALYSIS (Finance & Human Resources > Budget Analysis) • USR_C_IT_SECURITY (Information Technology > Security) • USR_C_STU_COURSES (Student & Faculty > Courses) – Writer groups are subject area-based and will now be USR_W_[subject area], examples: • USR_W_ADVANCEMENT • USR_W_FINANCE • USR_W_STUDENT 2018 19 th Annual PABUG Conference

New Security Review Capability • Wrote code to move content store security information to the ODS. • Built table structures and Cognos packages to support the data. • Reports will be available to data stewards and security officers to monitor annually. 2018 19 th Annual PABUG Conference

Open to the Floor • Questions • Comments 2018 19 th Annual PABUG Conference

Thank Your input matters! Please submit a session evaluation. PABUG Mobile App Session Browser https: //pabug. conferenspy. com/sessionlist/ 2018 19 th Annual PABUG Conference