Set Up Object Capabilities for a Package

Use this functionality to specify the secured functions and features that users, groups, or roles can use with specific packages.

You can specify object capabilities at the package level or, if the package is stored in a folder, at the folder level. Capabilities specified at the folder level apply only to packages in that folder and in its subfolders, and not to any other entries, including reports. For example, if a folder contains packages, reports and a subfolder that contains other packages and reports, only the packages in the folder and in the subfolder are affected by the capabilities settings.

Before you begin

To use object capabilities, the users must

have access to the secured functions and features associated with the package Secured Functions and Features
have access to the Object Capabilities secured function Set Entry-Specific Capabilities
have set policy permissions for the package Access Permissions and Credentials or own the package

When setting up object capabilities for the first time after installing IBM Cognos software, we recommend that you start with Public Folders, and that the capabilities for Public Folders mirror the global capabilities. This provides an accurate baseline on which object capabilities can be further refined.

Procedure

In IBM Cognos Connection, click the properties button for the package that you want, or the folder that contains the package.
Tip: When setting up object capabilities for Public Folders, click the properties button in the product toolbar.
Click the Capabilities tab.
Select the Override the capabilities acquired from the parent entry check box.
In the Name and Capabilities list, select the check box next to the user, group, or role for which you want to specify object capabilities.
If the user, group, or role is not in the list, click Add. If you want to remove the user, group, or role from the list, select its check box, and click Remove.

For more information about adding or removing entries from this list, see the steps in Set access permissions for an entry.
In the Grant and Deny list, select or clear the applicable check boxes to grant or deny the required object capabilities for users, groups, or roles.
An icon that represents a granted or denied capability appears next to the name of the user, group, or role. When you deny access to a secured function, you automatically deny access to all its secured features.
If applicable, select the Delete the capabilities of all child entries check box.
Use this option to specify object capabilities for a hierarchy of entries, for example, for all packages in a folder.
Click OK.