In SQL Server 2000 - Analysis Manager, how to set role privilege for different groups of user to access cubes, dimension and measure
If I use Excel 2002 to acces the cubes in AM, are the permission setting still apply in Excel
That means, for example, in AM, if I set "AAA" can access a cube, but "BBB" can't. Then if "AAA" login a client PC & use Excel, he/she can access the cube. But if user "BBB" use Excel to access the cube, he/she is not allow to access the cube
Am I right

Yes, you are right.

User BBB cannot access the cube if he hasn't been granted
permissions from Analysis Manager. The security rules will
hold good even if users connect via Excel Application.

(Note: OLAP Administrators can access all cubes
irrespective of access rights specified in the Analysis
Manager.)

To set access rights to different users / user group

USE Cube Roles manager to set access right for individual
cubes - You can launch Cube Roles Manager by right
Clicking the Cube and selecting manager Roles.

USE Database Roles manager to set access rights at
database level - You can launch Database Roles Manager by
right Clicking the Database Roles and selecting manager
Roles.




dimension and measure?
use Excel, he/she can access the cube. But if user "BBB"
use Excel to access the cube, he/she is not allow to
access the cube.

Yes, you are correct.
The permissions are for *any* connection regardless of what application the
client is using -- Excel or any client tool.
Security is enforced on the server.

Just remember a couple of things.
1) Any user which is a member of the OLAP Administrators local group on the
Analysis server will automatically see everything.
2) Permissions are 'union'ed together. So if a user is a member of Role1 and
they can see all of the USA; and the user is also a member of Role2 which
can see Europe -- then when they log on they can see both USA and Europe.
This is true even though Role1 might have specifially denied permission to
see Europe. This can be a bit counter-intuitive until you get used to it.
The rule-of-thumb is that if you are allowed to access/see something in any
role, then you will always be allowed to see if even if you are specifically
denied access somewhere else.

Hope that helps.
--
Dave Wickert [MS]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI Practices Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Ching" <anonymous (AT) discussions (DOT) microsoft.com> wrote

the cube. But if user "BBB" use Excel to access the cube, he/she is not
allow to access the cube.