--- title: Cognos Security Guidelines – 6 Things NOT to Do description: Cognos security guidelines listing things you want to avoid in your administration of Cognos security environment. image: https://www.envisn.com/hs-fs/file-15274336-jpg/images/do-not-sign.jpg --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) [![see our new video the magic of netvisn](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/1845b46e-0995-41bd-9970-5523914e0cdd.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/1845b46e-0995-41bd-9970-5523914e0cdd) # Envisn's IBM Cognos Blog ## [Cognos Security Guidelines – 6 Things NOT to Do](https://www.envisn.com/envisn-cognos-blog/bid/82611/Cognos-Security-Guidelines-6-Things-NOT-to-Do) Posted by [Rick Ryan](https://www.envisn.com/envisn-cognos-blog/author/rick-ryan) - [Tweet](https://twitter.com/share) *By Elwood Philbrick, [Envisn, Inc.](https://www.envisn.com/envisn-products/netvisn/)* ![do not do sign](https://www.envisn.com/hs-fs/file-15274336-jpg/images/do-not-sign.jpg)On any listing of topics related to Cognos BI, security is almost always at or near the top. This subject area consumes more time and effort of administrators than anything else. Part of this stems from the lack of transparency on security within Cognos BI itself. So to make your life easier, here are some things you want to avoid in the administration of Cognos security:   1. **Don’t administer Cognos security without an effective security model.** Ideally your Cognos security model is able to leverage the external security model in use within your organization. But beyond that, you need a model of how you map your organization’s members into your Groups and Roles. This is the single most important factor in creating an effective Cognos security model since it is used to define permissions to Cognos Content Store objects and features available to BI users. 2. **Don’t confuse groups and roles in the Cognos namespace.** Groups and roles in the Cognos namespace behave almost identically. The difference is that groups can contain only accounts and other groups, while roles can contain accounts, groups and other roles. Creating multiple groups in a role can easily get complicated very quickly, but it may make sense if you use the role for broad access control and the groups for limited access. A simpler approach would be to use roles to control access to capabilities and groups to manage access to content. 3. **Don’t over-apply security in Cognos BI.** The goal is to secure sensitive data from unwarranted access while providing the necessary data to authorized Cognos BI users. 4. **Don’t combine the purposes of content security and feature permissions.** Use one set of groups or roles to control access to content and another set to control access to features (Query Studio, Report Studio, etc.). 5. **Don’t give groups or roles names that have no obvious meaning.** Using clear, simple names that denote its members or function will help insure that it is used consistently across the enterprise. Remember, names used need to survive their creator’s presence. 6. **Don’t think it will get simpler over time.** Many security models fail because what may have started out to be a consistent approach to accounts, groups and roles became compromised and inconsistent over time. This happens because of changing organizational needs, untrained administrators and simple mistakes. Simply stated, it has outlived its usefulness. Many organizations find that their Cognos BI security has gotten so complex and unwieldy over time that the only option for them is to start over. While on the face of it this may sound attractive, some of the challenges of mapping existing content, members, etc. into a new model (let alone creating one) may prove to be daunting. Still, for some, not moving to a new security model and structure is not an option. But it’s not an easy task especially without tools that can help you understand how your current security is implemented. For more information on IBM Cognos security guidelines you may find our ebook [*Mastering Cognos Security *](https://www.envisn.com/mastering-ibm-cognos-security/) helpful.   [![Learn more about how you can manage Cognos Security more efficiently with Netvisn.](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/5535547f-38e0-4788-a1c6-4e2f29dee513.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/5535547f-38e0-4788-a1c6-4e2f29dee513)   *© 2012 - Envisn, Inc. - All Rights Reserved* *Image by [WTPille](http://www.flickr.com/photos/46007653@N08/) * Topics: [Cognos Security](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) *Your feedback is very important to us - we’d love to hear your comments!* ### Subscribe to Envisn's IBM Cognos Blog ### Posts by Category - [Cognos Content Store (22)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-content-store) - [Cognos BI Best Practices (21)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-best-practices) - [Cognos Analytics (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-analytics) - [Cognos BI administration (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) - [Cognos Security (18)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) - [Cognos Tools (14)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-tools) - [Cognos Audit Data (11)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-data) - [Cognos Reporting (9)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-reporting) - [Cognos Auditing (8)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing) - [Cognos 10 (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-10) - [Cognos Framework Manager (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-framework-manager) - [Cognos Metadata (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-metadata) - [BI Trends (6)](https://www.envisn.com/envisn-cognos-blog/topic/bi-trends) - [IBM Information on Demand (6)](https://www.envisn.com/envisn-cognos-blog/topic/ibm-information-on-demand) - [Cognos Audit Log (5)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) - [cognos impact analysis (4)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-impact-analysis) - [Big Data (3)](https://www.envisn.com/envisn-cognos-blog/topic/big-data) - [Cognos Data Sources (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-sources) - [Cognos Documentation (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-documentation) - [Cognos Scheduling (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-scheduling) - [Product Information (3)](https://www.envisn.com/envisn-cognos-blog/topic/product-information) - [cognos data lineage (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-lineage) - [Archiving Cognos Content (2)](https://www.envisn.com/envisn-cognos-blog/topic/archiving-cognos-content) - [Cognos FM Model (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model) - [Cognos migration (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-migration) - [Announcements (1)](https://www.envisn.com/envisn-cognos-blog/topic/announcements) - [Cognos Change Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-change-management) - [Cognos Data Provenance (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-provenance) - [Cognos Hotfiles (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-hotfiles) - [Cognos Powerplay (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-powerplay) - [Cognos Triggers (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-triggers) - [Consolidating Cognos Environments (1)](https://www.envisn.com/envisn-cognos-blog/topic/consolidating-cognos-environments) - [Impromptu (1)](https://www.envisn.com/envisn-cognos-blog/topic/impromptu) - [Merging Content Stores (1)](https://www.envisn.com/envisn-cognos-blog/topic/merging-content-stores) - [Remote Cognos Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/remote-cognos-management) - [cognos deployments (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-deployments) - [cognos fm model documentation (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model-documentation) - [cognos workspace (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-workspace) - [netvisn (1)](https://www.envisn.com/envisn-cognos-blog/topic/netvisn) [see all](https://www.envisn.com/envisn-cognos-blog/bid/82611/Cognos-Security-Guidelines-6-Things-NOT-to-Do#) ### Posts by Popularity [![free download expert guide to cognos audit data](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/6933ba0f-4664-4d5d-9413-edf64d7b2644) ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*