Resticting user view of parts of a cube dimension

  • Hi,

    I've got a dimension which lists the stores across the country (about 2000 locations in total), ideally i'll like to restrict each store manager only to see their own stores, and each area manager to see their group of stores, based on their log-in information

    Example of the dimension

    -Group

    -Country

    -Region

    -County

    -Cost Centre

    Cost Centre is a unique number

    After looking at a few articles, using role based is going to be a bit of a headache to implement for all the locations. My initial thought was to create a table with the relavent login name and a list of the locations that they can see.

    Is there a better way? something generic and scalable would be nice, with the least amount of administrational overhead. I do have a .Net developer so if there is a way programmatically we can do it, let me know that to.

    SQL server 2005 enterprise, we're also running Active Directory

    thanks

    Jon

  • Sounds like you want dynamic security versus a static setup int he roles. It's a little old now but the following is an article on how to implement dynamic security in SSAS (here). A google search for dynamic security "analysis services" is likely to turn up more. I think Teo Lachev may have included some info on this also in his Applied microsoft Analysis Services 2005 book.

    I think the SSAS 2005 Perf Guide also had some info on the perf implications of dynamic security.

    HTH,

    Steve.

  • Hi Steve,

    thanks for the link, i did come across it before. I've had a look at the book on google books, its seems to be the method i'm going to use.

    thanks for your help

    Jon

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply