--- title: Mastering IBM Cognos Security - Part 3 description: Understanding Access Permission Settings on IBM Cognos objects, series of blogs on understanding and managing security in an IBM Cognos environment image: https://www.envisn.com/hs-fs/file-15274922-jpg/images/ebook.jpg --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) [![see our new video the magic of netvisn](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/1845b46e-0995-41bd-9970-5523914e0cdd.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/1845b46e-0995-41bd-9970-5523914e0cdd) # Envisn's IBM Cognos Blog ## [Mastering IBM Cognos Security - Part 3](https://www.envisn.com/envisn-cognos-blog/bid/43357/Mastering-IBM-Cognos-Security-Part-3) Posted by [The Envisn Team](https://www.envisn.com/envisn-cognos-blog/author/the-envisn-team) - [Tweet](https://twitter.com/share)   by Gary Larsen - [Envisn, Inc.](https://www.envisn.com/) ## Understanding Cognos Access Permissions Settings on Cognos objects (A series of blogs on understanding and managing security in the IBM Cognos environment - see *[Cognos Security](https://www.envisn.com/envisn-cognos-blog/bid/43351/Mastering-IBM-Cognos-Security-Part-1), Part 1*) Cognos Access Permissions settings on Cognos objects are use to grant or deny access or actions for specific security objects, usually Groups or Roles. There are five access permissions which are described briefly here. Detail information is available in the IBM Cognos Documentation: IBM Cognos Administration and Security Guide 8.4.0 ### Cognos Access Permissions | Read | View all properties including output Create a shortcut to an object | | --- | --- | | Write | Modify properties of or delete an object Create objects in a container such as a package or folder Modify an object’s specification in a studio: Report Studio, Query Studio, etc. Create new outputs for a report | | Execute | Run objects such as reports, report views, events and metrics | | Set Policy | Read and modify the security settings for an object | | Traverse | View the contents of a container such as a package or folder | In addition to these access permissions there are other important rules which influence a user’s access to and available actions on an object. ### Cognos Group / Role Membership A user assumes the combined access permissions of all the groups and roles defined for an object of which the user is a member (explicit or implicit) **Granted and Denied Access in Cognos** Denied Access has precedence over Granted Access**** **Traverse Access in Cognos ** To access an object a user must have Traverse access permission on all of the ancestors of the object. **Ownership of Objects in Cognos** The owner of an object has full access permissions to the object (but still requires traverse access). **Cognos System Administrators** Users which are members the System Administrators Role in the Cognos namespace have full access permissions to all objects. **Access Permission Inheritance in Cognos** Access permissions on a content store object are by default inherited by its parent. To assign different permissions on an object then check the ‘Override the access permissions acquired from the parent entry’ option on the permissions form. If you want clear any overridden permissions on the descendants of an object then check the ‘Delete the access permissions of all child entries’ option on the permissions form. The inheritance of security settings in Cognos makes administration easier when dealing with a large number of objects. With well thought out organization of the content store objects only a single ancestor’s security will need to change. However, when security is overridden at lower levels in the object hierarchy it becomes difficult to determine where these overrides exist and what impact they have. This is another case where third party software tools are useful. The next part of this series will explore [management of IBM Cognos Capabilities and the impact on license compliance](https://www.envisn.com/envisn-cognos-blog/bid/43359/Mastering-IBM-Cognos-Security-Part-4).   [![Learn more about how you can manage Cognos Security more efficiently with Netvisn.](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/5535547f-38e0-4788-a1c6-4e2f29dee513.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/5535547f-38e0-4788-a1c6-4e2f29dee513) #### [*![IBM Cognos Security Ebook](https://www.envisn.com/hs-fs/file-15274922-jpg/images/ebook.jpg?width=61&height=47&name=ebook.jpg)*](https://www.envisn.com/mastering-ibm-cognos-security/?utm_campaign=Download-Ebook-Cognos-Security&utm_source=Blog%20Posts%20tagged%20%22Security%22) #### *Download the Ebook: *[* Mastering IBM Cognos Security*](https://www.envisn.com/mastering-ibm-cognos-security/?utm_campaign=Download-Ebook-Cognos-Security&utm_source=Blog%20Posts%20tagged%20%22Security%22) Topics: [Cognos Security](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) *Your feedback is very important to us - we’d love to hear your comments!* ### Subscribe to Envisn's IBM Cognos Blog ### Posts by Category - [Cognos Content Store (22)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-content-store) - [Cognos BI Best Practices (21)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-best-practices) - [Cognos Analytics (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-analytics) - [Cognos BI administration (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) - [Cognos Security (18)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) - [Cognos Tools (14)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-tools) - [Cognos Audit Data (11)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-data) - [Cognos Reporting (9)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-reporting) - [Cognos Auditing (8)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing) - [Cognos 10 (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-10) - [Cognos Framework Manager (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-framework-manager) - [Cognos Metadata (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-metadata) - [BI Trends (6)](https://www.envisn.com/envisn-cognos-blog/topic/bi-trends) - [IBM Information on Demand (6)](https://www.envisn.com/envisn-cognos-blog/topic/ibm-information-on-demand) - [Cognos Audit Log (5)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) - [cognos impact analysis (4)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-impact-analysis) - [Big Data (3)](https://www.envisn.com/envisn-cognos-blog/topic/big-data) - [Cognos Data Sources (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-sources) - [Cognos Documentation (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-documentation) - [Cognos Scheduling (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-scheduling) - [Product Information (3)](https://www.envisn.com/envisn-cognos-blog/topic/product-information) - [cognos data lineage (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-lineage) - [Archiving Cognos Content (2)](https://www.envisn.com/envisn-cognos-blog/topic/archiving-cognos-content) - [Cognos FM Model (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model) - [Cognos migration (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-migration) - [Announcements (1)](https://www.envisn.com/envisn-cognos-blog/topic/announcements) - [Cognos Change Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-change-management) - [Cognos Data Provenance (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-provenance) - [Cognos Hotfiles (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-hotfiles) - [Cognos Powerplay (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-powerplay) - [Cognos Triggers (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-triggers) - [Consolidating Cognos Environments (1)](https://www.envisn.com/envisn-cognos-blog/topic/consolidating-cognos-environments) - [Impromptu (1)](https://www.envisn.com/envisn-cognos-blog/topic/impromptu) - [Merging Content Stores (1)](https://www.envisn.com/envisn-cognos-blog/topic/merging-content-stores) - [Remote Cognos Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/remote-cognos-management) - [cognos deployments (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-deployments) - [cognos fm model documentation (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model-documentation) - [cognos workspace (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-workspace) - [netvisn (1)](https://www.envisn.com/envisn-cognos-blog/topic/netvisn) [see all](https://www.envisn.com/envisn-cognos-blog/bid/43357/Mastering-IBM-Cognos-Security-Part-3#) ### Posts by Popularity [![free download expert guide to cognos audit data](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644) ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*