---
title: "How to: Secure Data Modules in IBM Cognos Analytics on Cloud On-Demand"
description: "If users need to create reports and other content from a Data Module in[IBM Cognos Analytics](https://www.aramar.co.uk/ibm-cognos-analytics/), you may want them to be able to **use the Data Module without being able to edit it**. In this guide, we'll show you…"
url: "https://www.aramar.co.uk/knowledge-share/ibm-cognos-analytics/how-to-secure-data-modules-in-ibm-cognos-analytics-on-cloud-on-demand/"
updated: "2026-09-09"
category: IBM Cognos Analytics
---

# How to: Secure Data Modules in IBM Cognos Analytics on Cloud On-Demand

If users need to create reports and other content from a Data Module in[IBM Cognos Analytics](https://www.aramar.co.uk/ibm-cognos-analytics/), you may want them to be able to **use the Data Module without being able to edit it**.

In this guide, we'll show you how to restrict access to Data Modules in IBM Cognos Analytics on Cloud On-Demand, while still allowing users to use them to author content.

There are three main steps:

1. Create a user group for those who need restricted access.
2. Give the group read-only access to the folder containing your Data Modules.
3. Deny Web-based modelling so members of the group cannot open or edit the Data Modules.

For this example, we'll use a group called **Secured Data Modules**.

## 1. Create a user group

From the main menu in IBM Cognos Analytics, go to:

**Manage > People > Accounts > Cognos**

Select **Create group**.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-08-25-150136-1024x250.png)

Give your group a suitable name, such as **Secured Data Modules**, and add a description if required.

Select **Next > Add members**, find the users you want to restrict and add them to the group.

Select **Apply**, followed by **Create**.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-09-09-at-09.57.13.png)

 

Your restricted user group is now ready.

## 2. Set the Data Module folder permissions

Next, we'll prevent members of the group from saving changes to the folder containing the Data Modules.

Navigate to the relevant Data Module folder and open **Properties > Permissions**.

Select **Override parent permissions** and remove the existing entries.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-08-25-150556-1024x475.png)

Select **+** to add a new entry and navigate to **Cognos**.

Choose the **Secured Data Modules** group and select **Add**.

The group should now appear with **Read** permission.

Select **Apply to all children** to apply these permissions to all Data Modules within the folder, then select **Save** and **Close**.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-08-25-150733-1024x325.png)

> **Tip:** You can apply these permissions to individual users instead, but using a group generally makes access easier to manage.

Members of the group can now access the folder, but they cannot save changes to it.

However, at this stage they can still open a Data Module. We therefore need to make one further change.

## 3. Deny Web-based modelling

Return to the Data Module folder and open:

**Properties > Capabilities > Set capabilities**

Turn on **Override capabilities** and select **Add**.

Navigate to **Cognos**, select the **Secured Data Modules** group and choose **Apply**.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-08-25-150937-1024x299.png)

Select **Override child capabilities** so the setting is inherited by the Data Modules within the folder.

Select the **Secured Data Modules** group and find **Web based modelling** in the capabilities list.

Set **Web based modelling** to **Deny**.

Select **Save** and **Close**.

![](https://www.aramar.co.uk/wp-content/uploads/2026/08/Screenshot-2026-08-25-153412-1024x630.png)

The Data Modules within the folder will inherit these capabilities. Members of the restricted group will therefore be unable to open or edit the secured Data Modules.

## What happens to new Data Modules?

Any Data Modules subsequently added to the secured folder will inherit the folder permissions. Members of the **Secured Data Modules** group will therefore be unable to edit them or save changes to the folder.

### Important

Users can still copy a secured Data Module into another folder where they have full permissions, such as **My content**, and edit their own copy.

They cannot, however, overwrite the secured Data Module held within the protected Team content folder.

## Need help with IBM Cognos Analytics?

If you need help managing security, access or your wider IBM Cognos Analytics setup,[**get in touch with the Aramar team**](http://www.aramar.co.uk/contact/).