Post reply

Add filter to only show countries that user has access (SSAS)

  • July 16, 2012 at 8:31 am

    #392753

    Hello,

    I am new to performance point. I am using Performance Point as a reporting tool accessing an SSAS cube. I implemented data level security (by country), in the cube which works perfectly. The issue that I am having is that when a user logs into Performance Point they can see all of the countries BUT can only see data/measures that they have access to. So basically the data level security is working on the SSAS side, but Perforamnce Point is still showing all countries. I saw an area where I can place an MDX query in Performance Point. Is there an MDX query that I can use that will only display the countries the current user has access to?

    Thanks,

    Dave

  • July 16, 2012 at 9:52 am

    #1513172

    What version of PerformancePoint are you using? If you are using 2010, then take a look at the data source you have defined for SSAS and verify that it is using Per User security versus the Unattended Account. If you have that in place you should be good to go. Depending on your configuration this could also require Kerberos to work properly and there is a SharePoint 2010 Kerberos white paper that you can download from Microsoft to go through the steps to get that setup.

    ----------------------------------------------------------------------------------------
    Dan English - http://denglishbi.wordpress.com

  • July 16, 2012 at 2:22 pm

    #1513312

    Thank you for your quick response. I am using Share Point 2010. Here is the MDX query that is defined in the SQL Role in the SSAS cube. I am not sure how to answer your questions, but maybe this query will...

    NonEmpty

    (

    [Dim Local Drilldown Cube].[Fact Key].Members,

    (

    STRTOMEMBER("[Security Users].[User Name].[" + CustomData() + "]"),

    [Measures].[CUBE SECURITY Count]

    ))

  • July 16, 2012 at 2:44 pm

    #1513325

    One more question about how the security is defined in the data source:

    In the data source designer, under Impersonal Information, I selected to use the service account. Is this the correct selection?

    Thanks again for your help

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply