--- title: Mastering IBM Cognos Security Part - 4 description: "Managing IBM Cognos: IBM Cognos Capabilities and License Compliance, understanding and managing security in an IBM Cognos environment." image: https://www.envisn.com/hs-fs/file-15274922-jpg/images/ebook.jpg --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) [![see our new video the magic of netvisn](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/1845b46e-0995-41bd-9970-5523914e0cdd.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/1845b46e-0995-41bd-9970-5523914e0cdd) # Envisn's IBM Cognos Blog ## [Mastering IBM Cognos Security Part - 4](https://www.envisn.com/envisn-cognos-blog/bid/43359/Mastering-IBM-Cognos-Security-Part-4) Posted by [The Envisn Team](https://www.envisn.com/envisn-cognos-blog/author/the-envisn-team) - [Tweet](https://twitter.com/share)   *  by Gary Larsen - [Envisn, Inc.](https://www.envisn.com/) * ## Managing IBM Cognos Capabilities and License Compliance (A series of blogs on understanding and managing security in the IBM Cognos environment - see *[Mastering Cognos Security](https://www.envisn.com/envisn-cognos-blog/bid/43351/Mastering-IBM-Cognos-Security-Part-1), Part 1*) ### IBM Cognos Capabilities (Global) Access to various functional areas and administrative tasks is controlled through the Access Permissions assigned to IBM Cognos Capabilities, which are also known as Secured Features and Secured Functions. Examples of these include high level functions such as the authoring Studios, Administration and Scheduling, and lower level features such as Bursting and User Defined SQL. ### Access Permissions in Cognos Unlike other content store objects, the only Access Permissions which affect the Capabilities are Traverse and Execute. Other than that, these permissions follow the same rules described in Part 3 of this series, including Group / Role Membership, Traverse Access, and Granted and Denied Access. ### Cognos License Compliance IBM Cognos BI licenses are usually based upon (in part) access to various Features, such as Query Studio, Report Studio, Analysis Studio, PowerPlay Studio, Cognos Viewer and Administration. To monitor compliance it is necessary to determine how many Accounts have permissions to each of these features. This is where the complexity of the security hierarchy (described in Part 2 of this series) can make this task difficult. You will usually be using Groups to control access to Features so this is where good organization or a third party program able to analyze the security hierarchy would be useful. ### Cognos Object Capabilities Starting with IBM Cognos BI 8.3, it is possible to define Capability permissions on individual Packages and Folders. Giving an Account, Group or Role permission at this level also requires permission in Global Capabilities. In the case of Folders, Capability permissions are applied to all descendants. When applied to Package objects however, the Capability permissions will be applied to all reporting objects created from that package regardless of where they reside in the content store. This is a useful feature that, for example, could deny access to Studios for all reports created from that package (for a specific Group), rather than denying Write access to all the individual reports. Well, you can see from the blogs in this series so far that Cognos Security can get very complicated and confusing. Next, [*Mastering Cognos Security*](https://www.envisn.com/envisn-cognos-blog/bid/45763/Mastering-IBM-Cognos-Security-Part-5)* Part 5* will suggest some Cognos Best Practices that will help you maintain a manageable and secure Cognos environment. [![Learn more about how you can manage Cognos Security more efficiently with Netvisn.](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/5535547f-38e0-4788-a1c6-4e2f29dee513.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/5535547f-38e0-4788-a1c6-4e2f29dee513) #### [*![IBM Cognos Security Ebook](https://www.envisn.com/hs-fs/file-15274922-jpg/images/ebook.jpg?width=61&height=47&name=ebook.jpg)*](https://www.envisn.com/mastering-ibm-cognos-security/?utm_campaign=Download-Ebook-Cognos-Security&utm_source=Blog%20Posts%20tagged%20%22Security%22) #### *Download the Ebook: *[* Mastering IBM Cognos Security*](https://www.envisn.com/mastering-ibm-cognos-security/?utm_campaign=Download-Ebook-Cognos-Security&utm_source=Blog%20Posts%20tagged%20%22Security%22) Topics: [Cognos Security](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) *Your feedback is very important to us - we’d love to hear your comments!* ### Subscribe to Envisn's IBM Cognos Blog ### Posts by Category - [Cognos Content Store (22)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-content-store) - [Cognos BI Best Practices (21)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-best-practices) - [Cognos Analytics (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-analytics) - [Cognos BI administration (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) - [Cognos Security (18)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) - [Cognos Tools (14)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-tools) - [Cognos Audit Data (11)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-data) - [Cognos Reporting (9)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-reporting) - [Cognos Auditing (8)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing) - [Cognos 10 (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-10) - [Cognos Framework Manager (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-framework-manager) - [Cognos Metadata (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-metadata) - [BI Trends (6)](https://www.envisn.com/envisn-cognos-blog/topic/bi-trends) - [IBM Information on Demand (6)](https://www.envisn.com/envisn-cognos-blog/topic/ibm-information-on-demand) - [Cognos Audit Log (5)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) - [cognos impact analysis (4)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-impact-analysis) - [Big Data (3)](https://www.envisn.com/envisn-cognos-blog/topic/big-data) - [Cognos Data Sources (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-sources) - [Cognos Documentation (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-documentation) - [Cognos Scheduling (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-scheduling) - [Product Information (3)](https://www.envisn.com/envisn-cognos-blog/topic/product-information) - [cognos data lineage (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-lineage) - [Archiving Cognos Content (2)](https://www.envisn.com/envisn-cognos-blog/topic/archiving-cognos-content) - [Cognos FM Model (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model) - [Cognos migration (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-migration) - [Announcements (1)](https://www.envisn.com/envisn-cognos-blog/topic/announcements) - [Cognos Change Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-change-management) - [Cognos Data Provenance (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-provenance) - [Cognos Hotfiles (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-hotfiles) - [Cognos Powerplay (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-powerplay) - [Cognos Triggers (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-triggers) - [Consolidating Cognos Environments (1)](https://www.envisn.com/envisn-cognos-blog/topic/consolidating-cognos-environments) - [Impromptu (1)](https://www.envisn.com/envisn-cognos-blog/topic/impromptu) - [Merging Content Stores (1)](https://www.envisn.com/envisn-cognos-blog/topic/merging-content-stores) - [Remote Cognos Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/remote-cognos-management) - [cognos deployments (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-deployments) - [cognos fm model documentation (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model-documentation) - [cognos workspace (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-workspace) - [netvisn (1)](https://www.envisn.com/envisn-cognos-blog/topic/netvisn) [see all](https://www.envisn.com/envisn-cognos-blog/bid/43359/Mastering-IBM-Cognos-Security-Part-4#) ### Posts by Popularity [![free download expert guide to cognos audit data](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644) ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*