November 21, 2013 at 6:43 am
Goal:
Every user, who has a AD account shall retrieve a customized and personal report, that is filtrerad data of their personal name, sent to their email account.
Problem:
Based on my searching you can send same report to many AD users by using data-driven subscription in SSRS report server. Please look at the picture.
My request is to enable to filtrate the dataset, containing the list of data, that user can read their own data only, not the others. The list of user is based on data from AD account.
Is it possible to do it? If yes, how to do it?
Information:
*You are enable to retrieve their e-mail that is based on their AD account.
*Data source is SSAS.
*Using SQL server 2008 R2
*The database is a data mart.
November 24, 2013 at 4:35 pm
Thank you for your help!
Do you have picture or enable to illustrate it by using picture or somebody has written about it in her/his blog?
November 25, 2013 at 6:41 am
akirajt (11/21/2013)
Goal:Every user, who has a AD account shall retrieve a customized and personal report, that is filtrerad data of their personal name, sent to their email account.
Problem:
Based on my searching you can send same report to many AD users by using data-driven subscription in SSRS report server. Please look at the picture.
My request is to enable to filtrate the dataset, containing the list of data, that user can read their own data only, not the others. The list of user is based on data from AD account.
Is it possible to do it? If yes, how to do it?
Information:
*You are enable to retrieve their e-mail that is based on their AD account.
*Data source is SSAS.
*Using SQL server 2008 R2
*The database is a data mart.
Data Driven subscription - as mentioned, you would have to use a table and be passing a parameter for filtering based on the user / email combination.
If they are going to the SSRS site directly, you can apply security to the cube to the dimensions.
Use integrated security (per user), not a specified user in the connector.
There can be advantages to this, as it would be more than just the one report, it would apply to the whole cube.
And you can set it up so a Manager could see himself and all their people.
This can be a common scenario - Regional Manager for Sales, and Sales people for a Region.
You could have similar report scheduled as a subscription sent out weekly, monthly, etc., with a companion report they can access whenever they want. Just use different Data Source connections. Also do not give access to the Data Driven report itself or the Data Source to the users.
November 25, 2013 at 11:07 am
yayomayn (11/25/2013)
Well Greg has gone right ahead and answered the question not directly but brilliantly. I would listen to him - role based security in ssas is incredibly powerful and completely atomic. Also he seems to be able to catch fish so there's that 😀
Thanks, just thought tossing out how I have done this in the past might show a bit more of what might be a bigger picture.
We leveraged both Group in AD mapped to SSAS, and sometimes down to the individual.
What helped was Domain Admins that would create the requested groups quickly, and they delegated the membership to us.
I also developed some queries directly against AD for Group membership. Very handy to quickly see this in Excel from time to time, especially for audits.
Also was good for a quick check, as many times we had functional roles match up with job responsibilities.
Fishing - work hard, but take the time to play hard too.
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply