When trying to use a Microsoft SSAS OLAP cube data source in Framework Manager you get this error message:
MO-ERR-0028 The user starting the process doesn’t have the correct privileges
The solution is as follows:
- Use a network domain account for the Cognos service
- On Cognos server, in Local Security Settings under Local Policies/User Rights Assignment add the cognos service account to “Act as part of the operating system”
- ON SQL Server give cognos service security access to cube
- For the SSAS Data Source in Cognos Connection use IBM Cognos 8 service credentials for Signon.
Advertisements
Hi Will,
if possible could you help me to solve this situation, I want to build reports in C10 from SSAS Cube (Data Source), how can i set authorizations so a user fro example in the north region only sees that region and not every region of the company. Do I need to configure Kerberos in Active Director? not in Cognos side correct?
Thanks
DJCaldas
LikeLike
Hi DJ,
Yes, you need to use Kerberbos with single sign-on through Cognos. The method will be to use a role in the SSAS database with dimension security using an MDX statement. Do you have a table that relates user id’s with their regions? After the holidays, I can give you more detail. I’ve implemented this approach a few times.
Thanks,
Will
LikeLike
Hi Will,
Can you please provide step by step guide to add datasource connection for analysis services cube.
particularly what parameters to add for SignOn properties and how to configure them.
MS Analysis services is running under Network service mode.
Regards,
Amit
LikeLike
Hi Amit,
Do you plan to use user security in any way? This will affect how you configure sign-on and other properties.
Will
LikeLike
Hi Will,
I want to use the option, Signons->Create a signon that the Everyone group can use.
I am not aware what user id and password i need to provide for successful connection.
** I am using “MS Sql Server 2008 R2” version as data source. (running under Network Service mode)
Thanks!
Amit
LikeLike
Amit,
If Cognos and SQL Server are running on separate servers, you should use a domain account. Give that account access to the database.
On the local server, the network account user is NT AUTHORITY\NetworkService.
Thanks,
Will
LikeLike
** I am using “MS Sql Server 2008 R2 Analysis Services″ as data source. (running under Network Service mode)
LikeLike
Hey Will,
Thanks for the reply!
I am using local server for both instance.
SQL server is running under NT AUTHORITY\NetworkService.
IBM cognos service running under Local System account.
Now the problem is,
i want to use the option Signons->Create a signon that the Everyone group can use,
for SSAS datasource and i dont know what user id and password i need to provide.
If these would have been normal relational database in sql server i could give sql server authentication user id and password and can test the datasource successfully in cognos data source.
but as this is SSAS (running under network service, windows authentication), i am not aware of “user id” and password to put into.
**so what can be the user id and password for SSAS datasource.
Regards,
Amit
LikeLike