KB36744: How to restrict a user or user group to build and edit reports only on Intelligent Cubes in version 9.x.

Developer Analyst and Developer Designer with the corresponding privilege to use the Report Editor can build reports using all available schema and application objects. Now, due to security requirements, users may only be allowed to build reports based on Intelligent Cubes as in that case only objects of that particular cube can be used.  
 
By default, users creating a new report have a choice of report templates such as 'Blank Report' when opening the Report Editor. Using the 'Blank Report' template, a user can access all available schema and application objects (with corresponding permissions) and use them to build or modify reports.
 
Therefore, by restricting access permissions to the template objects, administrators can control the type of reports a user can build, i.e. in this case only reports based on Intelligent Cubes.
 
The following steps will show how to allow the user group 'I-Cube Report Designer' to solely build reports upon Intelligent Cubes:
 

• As System Administrator, find the existing report templates in the hidden folder 'Object Template' > 'Reports' and adapt the security options to deny access to the user group 'I-Cube report designer'.
   
  

•  
  Right-click template and select 'Properties' > Security and add the user group to the Access Control List with 'Deny All' permissions.
  

•  
  Now, the users of the group 'I-Cube report designer' cannot create any new report:
   
  

• Now, templates for existing Intelligent Cubes must be created and placed into the report templates folder in order to allow Intelligent Cube Report Designer to select the Intelligent Cube on which they would like to build a report.
   
  Create a new report based on the published Intelligent Cubes that are supposed to be made available to your designers.
  

•  
  Save the empty template in the hidden folder 'Object Templates' > 'Reports'.
   
  

•  
  --> Repeat the above step for all Intelligent Cubes you would like to make available to your users.
   
   
  
• Now, when creating a report, users can only see templates for Intelligent Cubes:
  

•  
  As well as have access to objects contained on the cube only:
   
  

 
In addition, if users should not be allowed to modify existing reports, administrators should adapt the permissions for the particular report objects (on report or folder level) by following instructions outlined in TN: 8802 - Explanation of Strategy 8.x Access Control List permissions.