Hello,

I need help with OLAP security roles in SSAS. I am using the June CTP of
2005. I have figured out dimension member security, but the requirements of
my security model require me to limit analysis from a regional level.

What I mean about regional is that each role can only view information for
their assigned region. So, I can limit the region dimension to only show
their region, but this approach fails when I use unrelated dimensions. Then
the analysis is back to allowing all fact records.

Is there another way to enforce this type of security model?

Thanks for any help you can provide.
-Scott

Can you explain what do you mean exactly by this ?

--
==============================*=================== =
Mosha Pasumansky - http://www.mosha.com/msolap
Analysis Services blog at http://www.sqljunkies.com/WebL*og/mosha
Development Lead in the Analysis Server team
All you need is love (John Lennon)
Disclaimer : This posting is provided "AS IS" with no warranties, and
confers no rights.
==============================*=================== =

I have created a role that I'm using to limit the members of a dimension
with. The dimension is a regular geographic dimension off the fact table.
When I browse the cube with that dimension it works great. The allowed
members is updated for the role to only allow the user to use that member.
For example, only allowing the role to select "Virigina" and only analyzing
those facts.

What I'm trying to do is limit everything in the fact table by that
dimension member. If I choose another dimension that has no hierarchy
involving the Virginia member, I now have access to all the fact records.
Including the one outside of Virginia. I'm trying to create a view of the
facts (subset) forcing all facts to be driven by the Virginia member.

I hope this makes sense. Thank you for your help!

-Scott

"Scott Mescall" wrote:

I have created a role that I'm using to limit the members of a dimension
with. The dimension is a regular geographic dimension off the fact table.
When I browse the cube with that dimension it works great. The allowed
members is updated for the role to only allow the user to use that member.
For example, only allowing the role to select "Virigina" and only analyzing
those facts.

What I'm trying to do is limit everything in the fact table by that
dimension member. If I choose another dimension that has no hierarchy
involving the Virginia member, I now have access to all the fact records.
Including the one outside of Virginia. I'm trying to create a view of the
facts (subset) forcing all facts to be driven by the Virginia member.

I hope this makes sense. Thank you for your help!

-Scott


"Mosha Pasumansky [MS]" wrote:

Would a named query defined in the UDM give me the results I'm looking for?
I'm trying to not create one cube for each of the 12 Regions I have.

Thanks Again,
Scott

"Mosha Pasumansky [MS]" wrote:

Perhaps I don't fully understand your problem, but it sounds like you should
simply enable Visual Totals in dimension security...

--
==============================*=================== =
Mosha Pasumansky - http://www.mosha.com/msolap
Analysis Services blog at http://www.sqljunkies.com/WebL*og/mosha
Development Lead in the Analysis Server team
All you need is love (John Lennon)
Disclaimer : This posting is provided "AS IS" with no warranties, and
confers no rights.
==============================*=================== =

Mosha,

Worked like a champ! Now I remember why I read your blog. Thank you for
the help.

I miss understood what visual totals was doing. I enabled it and everything
fell into place.

Thanks Again,
Scott

"Mosha Pasumansky [MS]" wrote:

This was so helpful for my implementation! Just what I was looking for thank
you! thank you!

"Mosha Pasumansky [MS]" wrote:

Mosha,

I implemented dimension security and enable visual totals and it worked;
however, in a few of the calcualated members the grand total in excel is off.
I'm not sure how to troubleshoot. I removed distant count because I realized
that visual totals enable wasn't working with it. All the grand totals are
correct until I get some of the calculated members, such as:

Applicable Amount. It takes to
the (Total Sales Amount - Total Sales Credited) - Discount Amount.

In excel, the grand total is calculated $30K more than it should and I am
not sure why. Any ideas?


"Mosha Pasumansky [MS]" wrote: