Thanks for your post and for the detail on what you have tried and the example of what you are seeing. Let’s run through your example and make sure I understand what you’re saying and what you are observing. You are trying to duplicate a user profile, including My Folders, schedules, and roles from one Cognos environment to another (e.g. Dev to Prod). You called these domains, but I am thinking this is what you mean (please correct me if I am wrong).
I think the key to this issue is that you are trying to copy the user’s role membership from one environment to another, but I don’t think you have that part quite right. The “Permissions” tab on a user profile does not list the user’s role membership. The “Permissions” tab on an account object lists who has permissions to view/modify/traverse the account object itself (which acts as a container in this case). What it sounds like is that you set the permissions for the user account in environment A to include the Consumers role and then duplicated the account object, including its permissions, to environment B. This won’t accomplish what you’re looking to accomplish, I think.
Let me demonstrate what I mean. Here, I have a simple user account whose permissions include access by the “Directory Administrators” role.
This seems to meet what you described as seeing a role on the user’s “Permissions” tab. Now, I go to the Directory Administrators role and click its “Members” tab.
The role in this environment is empty, or more particularly, it does not include the user account I showed earlier.
What you probably want to do has nothing to do with the permissions on the account object itself. Instead, you likely want to give the user in environment B the same role membership he had in environment A. That will require acting on the role objects in the target environment and not the account object itself. In short, what you want to do is query for the role using the SDK, including the role’s
members property, modify the list of members to include the searchPath for your account object, and then save the role object back to Cognos.
That explanation is admittedly a bit high-level, but once you read this hopefully you’ll have a better understanding of how to proceed. Let me know whether or not this works for you!