Permissions

Question

Permissions

mcTDBA

Default port

Points: 1458
More actions
October 27, 2010 at 9:45 pm

#157286

I am using excel 2003 connecting to SSAS 2008. I am a Domain admin and I am able to connect to the cube and view everything just fine. I have added the excel addon for OLAP and installed the 2008 connectivity tools.
My problem is with my users. I have added my users into a role and at this point in time of my trouble shooting I have granted them full access to the cube. But they still can't view any data in the cube. If I give those users full administrative rights to the SSAS instance they work just fine.
Any ideas what I am doing wrong. I have this funny feeling it has to do with the pass through authentication, but the users are not hitting a database on any other servers. I am stumped.

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

amit_gupta01 SSChasing Mays Points: 605 More actions · Answer 1

You need not to give full access to the cube. Read access will suffice. I have written one article on SSAS cell and dimension security. Let me know if you are not able to achieve the purpose after reading article and implementing accordingly:

SSAS Data Security (Dimension and Cell Security):

http://www.msbiconcepts.com/2010/10/ssas-data-security-dimension-and-cell.html

Thanks,
Amit G
http://www.msbiconcepts.com

mcTDBA Default port Points: 1458 More actions · Answer 2

Thanks for the reply! BTW, great article on setting permissions. I typcially set my permissions that way. But for this user in there role I have set them up with administrative rights so I can at least get the data to show up in spread sheet and it won't.

If I right click on the SSAS instance and give them full administrative rights she can see the data and I don't want to do that.

So, I am missing a permissions setting somewhere.

mcTDBA Default port Points: 1458 More actions · Answer 3

I am going to update my post. If I grant the user access to Server-Wide Security they can view all of the data. and I don't want them in there.

If I revoke the server wide security and give them full access to the role they cannot view any data.

mcTDBA Default port Points: 1458 More actions · Answer 4

I figured out what the problem was.

ServerName\SQLServerMSASUser$ServerName$MSSQLSERVER Account did not have access to the D:\MSAS10.MSSQLSERVER\OLAP directory. Once I grated full control to that directory the user was able to refresh the cube with out being a site wide administrator and full adminitrator on the role. They now have read only access and they are able to refresh the cube.

John Rowan SSC Guru Points: 56440 More actions · Answer 5

Thanks for posting the solution. I'm sure this will help somebody else down the road.

John Rowan

======================================================
======================================================
Forum Etiquette: How to post data/code on a forum to get the best help[/url] - by Jeff Moden