--- title: Cognos Security description: Understanding objects in Cognos Security and how they work together is critical in implementing a manageable and secure Cognos environment. --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) # Cognos Security #### *Security in Cognos is composed of a just a handful of object types, but understanding these objects and how they work together is critical in implementing a manageable and secure Cognos environment. * ### ![cognos security overview](https://www.envisn.com/hs-fs/hub/70307/file-15290378.jpg?width=300&name=file-15290378.jpg "cognos security overview") ### Namespaces in an IBM Cognos Environment There are at least two namespaces in every Cognos environment: the internal Cognos namespace plus external security namespace(s). The Cognos namespace is integral with the Cognos BI application. The objects it contains of security interest are Groups and Roles which can optionally be organized into Namespace Folders. (Other objects in this namespace which are not directly used in security are data sources, printers, contacts and distribution lists.) External namespaces (also called Authentication Providers) are defined in the Cognos Configuration program and can be of a variety of types, including Active Directory and LDAP among others. Once configured, the complete external security hierarchy of objects is available to Cognos consisting of Groups and Accounts organized into Namespace Folders. ### Groups and Roles in an IBM Cognos Environment Though different object types, Groups and Roles behave identically. They are containers which hold references to Accounts along with other Groups and Roles. These references are called members of the group/role. Only the Groups/Roles in the Cognos namespace can be modified to add or remove members. The external namespace Groups must be managed using the namespace’s editing tool, such as the Active Directory Users and Computers program. The organization of members into the Groups/Roles is the most important factor in setting up an effective security system since they are commonly used to define permissions to Cognos content store objects. ### Accounts in an IBM Cognos Environment Authentication to the Cognos applications is performed through the external namespace. A user must provide valid credentials for an account object in the namespace to gain entry to the application. Once authenticated, the user’s visibilities to objects and actions that can be performed are completely controlled by the memberships of the account and the security applied to both the content store objects and capability objects (to be covered later in the series). ## [Mastering IBM Cognos Security](https://www.envisn.com/envisn-cognos-blog/bid/43356/Mastering-IBM-Cognos-Security-Part-2) A user’s permissions in Cognos are determined by memberships of the Account object used for authentication. But the calculation of these memberships can become complicated. [***Read More >***](https://www.envisn.com/envisn-cognos-blog/bid/43356/Mastering-IBM-Cognos-Security-Part-2) --- ## [Understanding Cognos Access Permissions Settings on Cognos Objects](https://www.envisn.com/envisn-cognos-blog/bid/43357/Mastering-IBM-Cognos-Security-Part-3) Cognos Access Permissions settings on Cognos objects are use to grant or deny access or actions for specific security objects, usually Groups or Roles. There are five access permissions which are described briefly here. [***Read More >***](https://www.envisn.com/envisn-cognos-blog/bid/43357/Mastering-IBM-Cognos-Security-Part-3) --- ## [Key Insight into Cognos Security](https://www.envisn.com/envisn-cognos-blog/key-insight-into-cognos-security) If you’re a Cognos administrator there’s lots of key information you just need to have access to, especially in the area of security. Here we’re going to focus on what some consider among the top needs. These are: - *Groups, Roles, Memberships and Members * - *Security profile of a role, group or account * - *Inherited security * - *Object security * - *User permissions - licensing* [***Read More >***](https://www.envisn.com/envisn-cognos-blog/key-insight-into-cognos-security) --- ## [5 Biggest Mistakes with IBM Cognos Security](https://www.envisn.com/envisn-cognos-blog/5-biggest-mistakes-with-ibm-cognos-security) The biggest issues in the area of Cognos security as seen by Cognos administrators, collected informally from a series of questions responded to over the past 14 months. [***Read More >***](https://www.envisn.com/envisn-cognos-blog/5-biggest-mistakes-with-ibm-cognos-security) # ![cognos security management](https://www.envisn.com/hs-fs/hub/70307/file-897555366.png?width=100&name=file-897555366.png "cognos security management") # [NetVisn Makes Cognos Security Simple](https://www.envisn.com/cognos-security-management) The unique processing of object security by NetVisn provides the base view (what you can see in Cognos Connection) along with an Account view. This view translates security implemented through groups and roles into a display of security by account by applying permissions based upon memberships. [**NetVisn's Security Editor**](https://www.envisn.com/netvisn-security-editor) makes it easy to manage changes to security and set up new accounts.*   [Learn more about NetVisn's Security Editor >](https://www.envisn.com/netvisn-security-editor)* ### [![Learn more about how you can manage Cognos Security more efficiently with Netvisn.](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/5535547f-38e0-4788-a1c6-4e2f29dee513.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/5535547f-38e0-4788-a1c6-4e2f29dee513) ## Contact Us to Learn More See how Netvisn can simplify your security needs in Cognos! [![Netvisn Security slide ](https://www.envisn.com/hs-fs/hubfs/social-suggested-images/Netvisn%20Security%20slide8%20800x600-8.png?width=800&name=Netvisn%20Security%20slide8%20800x600-8.png "Netvisn Security slide ")](https://www.envisn.com/netvisn-for-cognos) [![free download mastering ibm cognos security](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/1e6e95a5-d19d-4372-a113-e0e70ec46f32.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/1e6e95a5-d19d-4372-a113-e0e70ec46f32) [![video cognos security](https://www.envisn.com/hs-fs/hub/70307/file-2076856679.jpg?width=245&name=file-2076856679.jpg "video cognos security")](https://www.envisn.com/videos/cognos-security-video) # Video: Cognos Security Management in NetVisn This video demonstrates how you can view and manage [security in Cognos](https://www.envisn.com/videos/cognos-security-video) in your Cognos environment more efficiently with the unique features only available with NetVisn. ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*