Granting Access to Analysis Services

  • When I try to add myself to the Microsoft Analysis Server on a server where I have Sysadmin rights (right click, select Properties, Security, Add) I get the error.

    does not have permission to alter the object or the object does not exist

    What am I doing wrong

    Madame Artois

  • Just to clarify, having administrative rights on the operating system does not guarantee that you'll have admin rights over the Analysis Services server. I'm guessing that's not the issue here. When you look at the list of server administrators listed on that Security dialog window, do you see your account or a Windows group to which your user account belongs?

    K. Brian Kelley
    @kbriankelley

  • I got to the end of the problem. I could not give myself Analysis permissions until I had made myself a local administrator on the server itself. The I could also grant permissions to other users even though they were not local administrators on the server. Very confusing that.

    Cheers

    Madame Artois

  • The default security model in Analysis Services is that the local Administrators group has ServerAdmin access and nobody else has.

    A system administrator can grant ServerAdmin access to the DBA group, then the DBA group can do anything they like on Analysis Services.

    Once the DBA group has ServerAdmin access on AS, they should change AS security so that local administrators do not have access by setting BuiltinAdminsAreServerAdmins to False.

    A similar concept applies to SSRS.

    Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.

    When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara

  • EdVassie (7/17/2009)


    Once the DBA group has ServerAdmin access on AS, they should change AS security so that local administrators do not have access by setting BuiltinAdminsAreServerAdmins to False.

    Sorry to be thick but where is the setting BuiltinAdminsAreServerAdmins? I've checked on Properties, Security but I'm obviously in the wrong spot!

    Madame Artois

  • Is 'Show Advanced/All Properties' checked? You do not see the option you need unless advanced properties aer shown.

    Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.

    When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara

  • Thanks I've sorted it now

    Madame Artois

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply