--- title: 5 Biggest Mistakes with IBM Cognos Security description: The biggest issues in Cognos security as seen by Cognos administrators, collected from a series of questions responded to over the past 14 months. image: https://www.envisn.com/hubfs/images/mistakes.jpg --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) ![cognos security management in netvisn](https://www.envisn.com/hs-fs/file-897555366-png/images/icon-secur-manag.png?width=143&name=icon-secur-manag.png "cognos security management in netvisn") # Cognos Security ### *as you've never seen it* # Envisn's IBM Cognos Blog ## [5 Biggest Mistakes with IBM Cognos Security](https://www.envisn.com/envisn-cognos-blog/5-biggest-mistakes-with-ibm-cognos-security) Posted by [The Envisn Team](https://www.envisn.com/envisn-cognos-blog/author/the-envisn-team) - [Tweet](https://twitter.com/share) *By Paul Hausser, *[*Envisn, Inc.* ](https://www.envisn.com/)![mistakes in cognos security](https://www.envisn.com/hs-fs/hubfs/images/mistakes.jpg?width=250&name=mistakes.jpg "mistakes in cognos security") This blog focuses on the biggest issues in the area of Cognos security as seen by Cognos administrators. It was collected informally from a series of questions responded to over the past 14 months. ***• Using an outdated security model.** *If your current security model cannot effectively handle change and growth you have a real problem. Every organization experiences these at different rates but change and growth are always there. - Ideally you want to have groups and roles that can accommodate adding new entities and changes to existing ones as they occur. This isn’t always possible so you may need to create a new security model at some point. - When creating a new security model try to insure that is clear, simple and easily understood. Spending some time understanding why you’re current model no longer works can be helpful to designing the new one. Also, eliminating groups and roles that are no longer needed can keep them from being used incorrectly in the future. ***• Inconsistent use of groups and roles across the environment.*** Groups and roles behave almost identically but they are different. Groups can contain only accounts and other groups, while roles can contain accounts, groups and other roles. A simple rule to follow is to use roles to control access to capabilities and groups to manage access to content. Another rule to follow is to minimize creating new groups wherever possible. ***• Too many people administering security.*** This is a recipe for disaster. Why? Because even if you have clear rules for assigning security they may not be clearly understood or followed. Which is why this area needs to be a balance between giving developers and others the ability to assign security as needed, but also limiting it to only that which is operationally necessary (damage control). It will usually be apparent when you’ve lost control in this area. [![All security settings are fully visible for all users, groups, roles, and objects in Netvisn - learn more](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/4a0fef01-3264-4d06-9272-3b054d9b900b.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/4a0fef01-3264-4d06-9272-3b054d9b900b) ***• No tools to manage Cognos security.*** Wouldn’t you like to be the one that discovers problems with your Cognos security? You need the ability to analyze, validate and view security and capabilities assignments quickly and easily. Testing your own security on a regular basis for compliance with standards should be part of what you do on a regular basis. But Cognos security is inherently complex, especially in the area of inherited security. Trying to view this within Cognos itself is difficult and tedious at best, and often impossible. This is because you’re forced to look at it by how it’s assigned in Cognos Connection. But trying to trace the thread of inherited security within Cognos through multiple layers is virtually impossible. A third party software tool like [NetVisn](https://www.envisn.com/netvisn) or a similar product can make it a lot easier to see all the dimensions of security and to validate settings as well. ***• Access Permissions.*** While easily understood within the context of the matrix in Cognos Connection their impact is less so. Access permissions on a Content Store object are by default automatically inherited from its parent. Security settings inheritance in Cognos makes administration easier when dealing with large numbers of objects. The problem arises when security is overridden at lower levels making it difficult to determine where these overrides exist and their impact. Most of this can be avoided by a well thought out organization of your Content Store objects minimizing the need for single object securing changes. ### *For a more in depth look on this subject you may want to look at the Ebook: [Mastering IBM Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security)* *[![free download mastering ibm cognos security](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/1e6e95a5-d19d-4372-a113-e0e70ec46f32.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/1e6e95a5-d19d-4372-a113-e0e70ec46f32)* *© [Envisn, Inc.](https://www.envisn.com/) 2016 All Rights Reserved.* Topics: [Cognos Security](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security), [Cognos BI administration](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) *Your feedback is very important to us - we’d love to hear your comments!* ### Subscribe to Envisn's IBM Cognos Blog [![netvisn gives you the ability to promote content - multiple folders or single reports - quickly and easily learn more](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/7822eb74-3957-44ed-b63f-27045b0b65a5.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/7822eb74-3957-44ed-b63f-27045b0b65a5) ### Posts by Category - [Cognos Content Store (22)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-content-store) - [Cognos BI Best Practices (21)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-best-practices) - [Cognos Analytics (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-analytics) - [Cognos BI administration (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) - [Cognos Security (18)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) - [Cognos Tools (14)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-tools) - [Cognos Audit Data (11)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-data) - [Cognos Reporting (9)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-reporting) - [Cognos Auditing (8)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing) - [Cognos 10 (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-10) - [Cognos Framework Manager (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-framework-manager) - [Cognos Metadata (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-metadata) - [BI Trends (6)](https://www.envisn.com/envisn-cognos-blog/topic/bi-trends) - [IBM Information on Demand (6)](https://www.envisn.com/envisn-cognos-blog/topic/ibm-information-on-demand) - [Cognos Audit Log (5)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) - [cognos impact analysis (4)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-impact-analysis) - [Big Data (3)](https://www.envisn.com/envisn-cognos-blog/topic/big-data) - [Cognos Data Sources (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-sources) - [Cognos Documentation (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-documentation) - [Cognos Scheduling (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-scheduling) - [Product Information (3)](https://www.envisn.com/envisn-cognos-blog/topic/product-information) - [cognos data lineage (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-lineage) - [Archiving Cognos Content (2)](https://www.envisn.com/envisn-cognos-blog/topic/archiving-cognos-content) - [Cognos FM Model (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model) - [Cognos migration (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-migration) - [Announcements (1)](https://www.envisn.com/envisn-cognos-blog/topic/announcements) - [Cognos Change Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-change-management) - [Cognos Data Provenance (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-provenance) - [Cognos Hotfiles (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-hotfiles) - [Cognos Powerplay (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-powerplay) - [Cognos Triggers (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-triggers) - [Consolidating Cognos Environments (1)](https://www.envisn.com/envisn-cognos-blog/topic/consolidating-cognos-environments) - [Impromptu (1)](https://www.envisn.com/envisn-cognos-blog/topic/impromptu) - [Merging Content Stores (1)](https://www.envisn.com/envisn-cognos-blog/topic/merging-content-stores) - [Remote Cognos Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/remote-cognos-management) - [cognos deployments (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-deployments) - [cognos fm model documentation (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model-documentation) - [cognos workspace (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-workspace) - [netvisn (1)](https://www.envisn.com/envisn-cognos-blog/topic/netvisn) [see all](https://www.envisn.com/envisn-cognos-blog/5-biggest-mistakes-with-ibm-cognos-security#) ### Posts by Popularity [![free download expert guide to cognos audit data](https://no-cache.hubspot.com/cta/default/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644.png)](http://cta-redirect.hubspot.com/cta/redirect/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644) ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*