Hi,

I am creating a web application. What I want is that when ever any user
registers himself, I want to assign a role to him which I have defined in
analysis service n according to his role when ever he requests the data from
cube the access permissions defined for this role should work as they
should.. Means I will have to create the users for analysis services
programmatically n also the role assignment too. I dont know how to do this.

Is it feasible? Can any one suggest anything?

Thanks in advance.
Rujuta

Yes, can be done using ADO and ADSI - I did this is a web-based OLAP
portal - non-trivial programming though. Good luck.

Chris H.

"Rujuta Gandhi" <rujuta (AT) intraactionsoftware (DOT) com> wrote

Hello Rujuta,

You can specify roles in the connection string to analysis services ('roles=a,b,c')
and then any queries made on this connection will have the permissions associated
with that role. This means you wouldn't have to create any users or modify
the user->role mapping in the cube. You can do it all from your webapp.
You would only use one windows account to make the connection though.

Will Muldrew

Hi,

thanks for ur valuable help but still I cant achieve the purpose. I have
used the connection string as follows.

Provider=msolap;Data Source=pratibha;Integrated Security=SSPI;Initial
Catalog=NewACDM;Persist Security Info=false;roles=Role1

this role1 denies access to each n everything. I have put that querystring n
I got this error.

Exception:Either the user, ???, does not have access to the NewACDM
database, or the database does not exist.


Then I changed the coonection string n switched to the role which was
accesssing everything. But it still gave the same error.

then I added the windows user everyone to the role which was allowing
everything n then it was working ok.

after that i switched connection to the role denying everything then also it
was getting everything.

does that mean that it still depends on the windows user. Or I have some
problems with the connection string I have used.

Can u help me out.

Thanks again

Ruju

"Rujuta Gandhi" <rujuta (AT) intraactionsoftware (DOT) com> wrote