Product:
Cognos Controller 10.1.1 FP2 (version 10.1.2155)
Windows 2008 R2 server

Symptom:
When user go to dialog Users they get a error message after some time.
Start Cognos Controller client and go to maintain – rights – users dialog.
If you click on a user in the list to the left then you will see that the CAM user field is blank.

Error message:
The user currently logged in is not authorized to use this method.

Cause:
There are doublets of the same user in the AD groups connected to the Cognos connection group Controller Users. This is not a issue in previous versions of Cognos Controller 8.

Solution:
Remove the user that is giving the issue from the Active Directory group you are using.

You can use “Active Directory Users and Computers” on a Domain Controller server to see the users that are part of the different AD groups.
Click on RUN from the Start menu on a Microsoft Windows 2008 server.
Enter DSA.MSC and click OK
If you get message “Windows cannot find dsa.msc. Make sure you typed the name correctly, and then try again” then the role “Active Directory Domain Services” is not installed on that computer.
Check with your local IT department if you can install it on the Server to have access to the tool.

Normally you add the users that should use Cognos Controller to a AD group – ControllerUsers.
If you have more than one domain, you may create a ControllerUsers AD group in each domain.
Then you add users from each domain to these groups.
If a user , KALLE, have a windows account in both domains, he can end up in both groups.
So user EU\KALLE in one group and user STHLM\KALLE in the other group.
Both ControllerUsers group are then added to the cognos group Controller Users inside Cognos Connection.
This will work, the users can login, but you can not add new users to the Cognos Controller User dialog.
You can only have ONE KALLE user in any of the AD groups that are used in the Controller User group inside Cognos Connection.
Remove one user at a time to find the bad one from the AD group ControllerUsers.
You need to exit and login to Cognos Controller Client between every change to test if it works.