This article outlines the two security modes that can be used to either exclude or include access to TM1 instances within Pulse.
