Best way to implement security for measures in SSAS


hi ssas gurus,

 

i have requirement need implement security on measures such visible set of users , not accessible set of users. now, have ssrs reports defined on top of these measures accessible both set of users. want reports displayed such measures should visible users access invisible or n/a should displayed when other set of users access reports. best way go forward this?

cheers, jason 

just implemented solution , works!!! lot raymond , craig!

the solution hybrid of raymond's , idea. steps took are

1) had dimension called product. added dummy attribute key of product dimension, , called rolesecurity. value of attribute 1 keys , attribute hidden in product dimension.

2) needed have security access on measure gross margin original. in calculated members of cube, made following calculation

create member currentcube.[measures].[gross margin] as 

iif(iserror([product].[rolesecurity].[1]),0,[measures].[gross margin original]);

3) have 2 roles called restrictedusers , powerusers. powerusers have access measures, no need there. restrictedusers role, select dimension data tab , use "deselect members" rolesecurity attribute. implies users of role not have access of values of attribute.

once deployed, if user of restricteduser role tries view grossmargin measure, see 0 result, while powerusers see actual value. in reports, 0 can used to conditionally display message "not authorized".

drawback

1) if user becomes aware of hidden measure called gross margin original, able query out

i love hear further drawbacks experts, guess maybe make new thread it.

cheers, jason p.s. : please click 'mark answer' button if post solves problem! :)


SQL Server  >  SQL Server Analysis Services



Comments

Post a Comment

Popular posts from this blog

Conditional formatting a graph vertical axis in SSRS 2012 charts

Image
hi, i have situation want color label on vertical axis of graph depending on condition. when values positive color black , when negative color red. i tried following condition but not working.   =iif(fields!myfield.value < 0 , "red", "black") i know there few threads mentioning feature not supported in ssrs 2008 wanted know if adddressed in ssrs 2012 or later? thanks , regards, oliver d'mello hi oliver, according description, want use expression specify different color axis labels based on values in chart. as tested in our environment, when apply condition in expression give dynamic color axis labels, color setting applies labels based on condition. issue happens in both sql server 2012 , 2014. please refer screenshots below: in scenario, recommend submit issue microsoft connect @ link https://connect.microsoft.com/sqlserver/feedback . connect site serve connecting point between , microsoft, , large community , microsoft intera
Read more

Register with Power BI failed

hi all, i've running local report server , want configure power bi integration. sign in azure active directory , registering power bi clientapp validated, fails following error: microsoft.reportingservices.wmiprovider.wmiproviderexception: unknown error has occurred in wmi provider. error code 80131500  ---> system.exception: exception of type 'system.exception' thrown.    --- end of inner exception stack trace ---    at microsoft.reportingservices.wmiprovider.rswmiadmin.throwonerror(managementbaseobject mo)    at microsoft.reportingservices.wmiprovider.rswmiadmin.savepowerbiinformation(string clientid, string clientsecret, string appobjectid, string tenantname, string tenantid, string resourceurl, string authurl, string tokenurl, string redirecturls)    at reportservicesconfigui.wmiprovider.rsreportserveradmin.savepowerbiinformation(powerbiappconfiguration appconfig) i tried sql server agent solution  ( https://social.msdn.microsoft.com/forums/en-us/58
Read more

SQL server replication error Cannot find the dbo or user defined function........

hi there, i ran problem while deploying sql 2008 transactional replication between 2 servers lets assume server , b. actually created  both distributor , publisher on server , after created subscriber pointed server b, launch replication monitor , found big red cross. when click on tab "distributor subscriber history" error says "cannot find either column "dbo" or user defined-function or aggregate "dbo.ufnleadingzeros", or name ambiguous". can body regarding issue. regards, ishuv hi, you need compare data , others reseved, index size, unused should not compared. differs. here server - data - 87896 kb server b - data - 78152 kb server data size includes publication tables, can't compare directly. need check article article know exact data size. SQL Server  > 
Read more