Is there any way we can do security sync or security update via TI or API for UX NextGen?
The problem right now is we are trying to use UX connecting to different TM1 instance, and the users are somehow “conflicting”, so therefore in UX, we may need to create some new groups, now when something need to test or change, we need to update security in multiple places, we can do a centralise assignment for TM1, but we still need to do it manually for UX, which is quite painful since at the moment it requires ADMIN to access, even though we know the mapping, we still need to assign manually and this is creating a lot of additional overhead.
I’m not sure exactly what you are asking for exactly.
It’s now possible to restrict a security sync to a subset of users and groups defined by a MDX expression and also to schedule a unattended security sync from a TM1 database. So at least at the frequency of the scheduled job you can ensure that group memberships in UX are in sync with the source TM1 system.
So I would maintain that approach to centralize for least manual maintenance overhead is to maintain roles and security in TM1 and sync the groups and group membership that are relevant for granting access to UX screens and features from TM1 to UX.
If you have multiple TM1 databases and conflicting group assignments between them this is a problem to solve in TM1! However - you don’t necessarily have to as typically you have a very small number of groups that are relevant for UX roles and normally they could all come from only one TM1 source.
In addition to the security sync from a TM1 database there is also options to:
maintain group menberships manually in a Excel table and upload this
create users, groups and group memberships via api (for any webapp simply /api/swagger to get the api documentation and examples)
You could write a script using the api to maintain the group memberships. However, why would you when it’s much easier to simply sync from TM1? I don’t understand why you say that this needs to be done manually?
Note the security sync can be saved as a cronjob task. Currently there is no external hook or trigger but this is coming.