dbTalk Databases Forums  

role creation / changes tahke more than 10min

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss role creation / changes tahke more than 10min in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Radu Colceriu
 
Posts: n/a

Default role creation / changes tahke more than 10min - 04-28-2005 , 10:43 AM






Hi

I have a dual xeon 3,6 4G ram , san disk system with SQL 2000 and Analysis
Services SP 3a.

I have a db with ~15 cubes and ~10 virtual cubes. The total size of the
cubes is aroung 600Mb. I have also around 200+ olap db roles wich give
permisions to the users/usergoups to see some members of the dimensions.

At the beggining of the creation of the roles everything was working fine
and quick but with each role that I've added the Analysis Manger need it
more and more time to save the role.

Now If I add/modify a role it takes more than 10 minutes to save the
changes. The processors are going crazy and the memory usage also.

The querying of the cubes is working fast and correct. Only the management
of the roles take too long.

There are any solutions for this? Anyone else have this problem? Is the
problem with the Analysis Manager? Are there another tools (better ones)?

Thanks,
Radu



Reply With Quote
  #2  
Old   
Dave Wickert [MSFT]
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 04-28-2005 , 06:30 PM






Yup. That is what it is like with a large number of DSO objects, whether or
not it is roles or partitions, or cubes, or whatever. The major problem is
that DSO has to create objects for the *entire* tree down from the database
when you do an open . . . and this just takes time because of the way that
Visual Basic (which is what DSO is written in) and COM work. As you found
out, it only impacts DSO and administration; not queries.

In this case, you might want to look at implementing dynamic security rather
than 200 roles. With dynamic security you create one role, but use MDX to
formulate the allowed and denied set based on the Username -- the single
role is used by everyone, but it acts differently depending on who you are.
A resource you might find helpful is here:
http://www.mosha.com/msolap/security.htm
Look under the heading of "Dimension Security" and "Dynamic Dimension
Security".
Or a direct like here:
http://www.mosha.com/msolap/samples/...20security.zip

Hope that helps.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote

Quote:
Hi

I have a dual xeon 3,6 4G ram , san disk system with SQL 2000 and Analysis
Services SP 3a.

I have a db with ~15 cubes and ~10 virtual cubes. The total size of the
cubes is aroung 600Mb. I have also around 200+ olap db roles wich give
permisions to the users/usergoups to see some members of the dimensions.

At the beggining of the creation of the roles everything was working fine
and quick but with each role that I've added the Analysis Manger need it
more and more time to save the role.

Now If I add/modify a role it takes more than 10 minutes to save the
changes. The processors are going crazy and the memory usage also.

The querying of the cubes is working fast and correct. Only the management
of the roles take too long.

There are any solutions for this? Anyone else have this problem? Is the
problem with the Analysis Manager? Are there another tools (better ones)?

Thanks,
Radu





Reply With Quote
  #3  
Old   
Radu Colceriu
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 04-29-2005 , 03:03 AM



Thanks

Unfortunatelly I can't use dynamic roles because the cubes are accessed via
an third party tool that generate the MDX automatically (arcplan dynasight).

I wrote a small c# application to try to change the roles automatically via
dso but with the same performance

I still don't understand why the dso/com modell is so slow... (very very
slow)... Even if there are 100.000 medium sized com
objects that should not be too much for a dual xenon3.6 with 4g ram.

There are no other tools that can change the repository and datafiles
directlly ... without dso? Something like... switch off the olap service ...
read the repository... change-it fast... start the service....



Radu




"Dave Wickert [MSFT]" <dwickert (AT) online (DOT) microsoft.com> schrieb im Newsbeitrag
news:uCk1FpETFHA.3188 (AT) TK2MSFTNGP09 (DOT) phx.gbl...
Quote:
Yup. That is what it is like with a large number of DSO objects, whether
or
not it is roles or partitions, or cubes, or whatever. The major problem is
that DSO has to create objects for the *entire* tree down from the
database
when you do an open . . . and this just takes time because of the way that
Visual Basic (which is what DSO is written in) and COM work. As you found
out, it only impacts DSO and administration; not queries.

In this case, you might want to look at implementing dynamic security
rather
than 200 roles. With dynamic security you create one role, but use MDX to
formulate the allowed and denied set based on the Username -- the single
role is used by everyone, but it acts differently depending on who you
are.
A resource you might find helpful is here:
http://www.mosha.com/msolap/security.htm
Look under the heading of "Dimension Security" and "Dynamic Dimension
Security".
Or a direct like here:
http://www.mosha.com/msolap/samples/...20security.zip

Hope that helps.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:OTm1tjATFHA.2680 (AT) tk2msftngp13 (DOT) phx.gbl...
Hi

I have a dual xeon 3,6 4G ram , san disk system with SQL 2000 and
Analysis
Services SP 3a.

I have a db with ~15 cubes and ~10 virtual cubes. The total size of the
cubes is aroung 600Mb. I have also around 200+ olap db roles wich give
permisions to the users/usergoups to see some members of the dimensions.

At the beggining of the creation of the roles everything was working fine
and quick but with each role that I've added the Analysis Manger need it
more and more time to save the role.

Now If I add/modify a role it takes more than 10 minutes to save the
changes. The processors are going crazy and the memory usage also.

The querying of the cubes is working fast and correct. Only the
management
of the roles take too long.

There are any solutions for this? Anyone else have this problem? Is the
problem with the Analysis Manager? Are there another tools (better ones)?

Thanks,
Radu







Reply With Quote
  #4  
Old   
Dave Wickert [MSFT]
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 04-29-2005 , 08:59 PM



Sorry. It is what it is. I appreciate that it is slow. I've worked on many
large systems and I understand the pain. Unfortunately it is more than just
the repository. There are also security files in the data folder which is
updated. It is not as simple as you describe, or we would have fixed it a
long, long time ago. Like I said, this isn't just roles, you will see it
with any large application. For example with T-3 we had over 450 partitions
and it took minutes to open up Analysis Manager. That mades management of
the system difficult, but not impossible.

Good news, it has been addressed in Yukon with its managed API that doesn't
populate then entire object tree on an open.

Bad news is that it is with us today. That is the best I can offer.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote

Quote:
Thanks

Unfortunatelly I can't use dynamic roles because the cubes are accessed
via
an third party tool that generate the MDX automatically (arcplan
dynasight).

I wrote a small c# application to try to change the roles automatically
via
dso but with the same performance

I still don't understand why the dso/com modell is so slow... (very very
slow)... Even if there are 100.000 medium sized com
objects that should not be too much for a dual xenon3.6 with 4g ram.

There are no other tools that can change the repository and datafiles
directlly ... without dso? Something like... switch off the olap service
....
read the repository... change-it fast... start the service....



Radu




"Dave Wickert [MSFT]" <dwickert (AT) online (DOT) microsoft.com> schrieb im
Newsbeitrag
news:uCk1FpETFHA.3188 (AT) TK2MSFTNGP09 (DOT) phx.gbl...
Yup. That is what it is like with a large number of DSO objects, whether
or
not it is roles or partitions, or cubes, or whatever. The major problem
is
that DSO has to create objects for the *entire* tree down from the
database
when you do an open . . . and this just takes time because of the way
that
Visual Basic (which is what DSO is written in) and COM work. As you
found
out, it only impacts DSO and administration; not queries.

In this case, you might want to look at implementing dynamic security
rather
than 200 roles. With dynamic security you create one role, but use MDX
to
formulate the allowed and denied set based on the Username -- the single
role is used by everyone, but it acts differently depending on who you
are.
A resource you might find helpful is here:
http://www.mosha.com/msolap/security.htm
Look under the heading of "Dimension Security" and "Dynamic Dimension
Security".
Or a direct like here:
http://www.mosha.com/msolap/samples/...20security.zip

Hope that helps.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:OTm1tjATFHA.2680 (AT) tk2msftngp13 (DOT) phx.gbl...
Hi

I have a dual xeon 3,6 4G ram , san disk system with SQL 2000 and
Analysis
Services SP 3a.

I have a db with ~15 cubes and ~10 virtual cubes. The total size of the
cubes is aroung 600Mb. I have also around 200+ olap db roles wich give
permisions to the users/usergoups to see some members of the
dimensions.

At the beggining of the creation of the roles everything was working
fine
and quick but with each role that I've added the Analysis Manger need
it
more and more time to save the role.

Now If I add/modify a role it takes more than 10 minutes to save the
changes. The processors are going crazy and the memory usage also.

The querying of the cubes is working fast and correct. Only the
management
of the roles take too long.

There are any solutions for this? Anyone else have this problem? Is the
problem with the Analysis Manager? Are there another tools (better
ones)?

Thanks,
Radu









Reply With Quote
  #5  
Old   
Radu Colceriu
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 05-02-2005 , 05:23 AM



Thanks for the answers.

Now I have around 200 roles in the db and until end of the year I should
have more than 300. I don't know how can I handle that.... but anyway..
thanks again for the answers,

best regards,
Radu


"Dave Wickert [MSFT]" <dwickert (AT) online (DOT) microsoft.com> schrieb im Newsbeitrag
news:%23sTE9gSTFHA.1404 (AT) TK2MSFTNGP09 (DOT) phx.gbl...
Quote:
Sorry. It is what it is. I appreciate that it is slow. I've worked on many
large systems and I understand the pain. Unfortunately it is more than
just
the repository. There are also security files in the data folder which is
updated. It is not as simple as you describe, or we would have fixed it a
long, long time ago. Like I said, this isn't just roles, you will see it
with any large application. For example with T-3 we had over 450
partitions
and it took minutes to open up Analysis Manager. That mades management of
the system difficult, but not impossible.

Good news, it has been addressed in Yukon with its managed API that
doesn't
populate then entire object tree on an open.

Bad news is that it is with us today. That is the best I can offer.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:OFXiPHJTFHA.612 (AT) TK2MSFTNGP12 (DOT) phx.gbl...
Thanks

Unfortunatelly I can't use dynamic roles because the cubes are accessed
via
an third party tool that generate the MDX automatically (arcplan
dynasight).

I wrote a small c# application to try to change the roles automatically
via
dso but with the same performance

I still don't understand why the dso/com modell is so slow... (very very
slow)... Even if there are 100.000 medium sized com
objects that should not be too much for a dual xenon3.6 with 4g ram.

There are no other tools that can change the repository and datafiles
directlly ... without dso? Something like... switch off the olap service
...
read the repository... change-it fast... start the service....



Radu




"Dave Wickert [MSFT]" <dwickert (AT) online (DOT) microsoft.com> schrieb im
Newsbeitrag
news:uCk1FpETFHA.3188 (AT) TK2MSFTNGP09 (DOT) phx.gbl...
Yup. That is what it is like with a large number of DSO objects,
whether
or
not it is roles or partitions, or cubes, or whatever. The major problem
is
that DSO has to create objects for the *entire* tree down from the
database
when you do an open . . . and this just takes time because of the way
that
Visual Basic (which is what DSO is written in) and COM work. As you
found
out, it only impacts DSO and administration; not queries.

In this case, you might want to look at implementing dynamic security
rather
than 200 roles. With dynamic security you create one role, but use MDX
to
formulate the allowed and denied set based on the Username -- the
single
role is used by everyone, but it acts differently depending on who you
are.
A resource you might find helpful is here:
http://www.mosha.com/msolap/security.htm
Look under the heading of "Dimension Security" and "Dynamic Dimension
Security".
Or a direct like here:
http://www.mosha.com/msolap/samples/...20security.zip

Hope that helps.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Radu Colceriu" <radu_colceriu (AT) hotmail (DOT) com> wrote in message
news:OTm1tjATFHA.2680 (AT) tk2msftngp13 (DOT) phx.gbl...
Hi

I have a dual xeon 3,6 4G ram , san disk system with SQL 2000 and
Analysis
Services SP 3a.

I have a db with ~15 cubes and ~10 virtual cubes. The total size of
the
cubes is aroung 600Mb. I have also around 200+ olap db roles wich give
permisions to the users/usergoups to see some members of the
dimensions.

At the beggining of the creation of the roles everything was working
fine
and quick but with each role that I've added the Analysis Manger need
it
more and more time to save the role.

Now If I add/modify a role it takes more than 10 minutes to save the
changes. The processors are going crazy and the memory usage also.

The querying of the cubes is working fast and correct. Only the
management
of the roles take too long.

There are any solutions for this? Anyone else have this problem? Is
the
problem with the Analysis Manager? Are there another tools (better
ones)?

Thanks,
Radu











Reply With Quote
  #6  
Old   
minimax
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 05-16-2005 , 10:25 AM



Hi,

can you store te restifctions of your rules in the (reational)
SQL-Server?

Using dynaSight, you can't get these information in your application
and use for addional restrictions using in all queries?
(via a central object, in every document whith an 'arrow' to each
result-set)
May be this will be faster!

You can also definie the rule, and parse the MDX (from the rule
options) directly into an sql-table, then using the MDAX by the
dynaSight-funcions:

[OBJ1] = contains MDSX
[OBJ2] = SQLTEXT([OBJ1])
AND(1=1;[OBJ2])


Regards
minimax

Administrator of http://www.dynaSight.net
the independent board for dynaSight-users and -developers

-------------------------------------
antares Management Applications GmbH
http://www.antares-mapps.de
mailto:internet (AT) antares-mapps (DOT) de


Reply With Quote
  #7  
Old   
Radu Colceriu
 
Posts: n/a

Default Re: role creation / changes tahke more than 10min - 05-23-2005 , 11:07 AM



Hi

I can't do this because the Analisys services 2000 doesn't support slicers
in the where clause (the 2005 will support it) and in dynasight I can't use
a column/row as where condition until the multiple select hierarchy will be
out :P .
The second one is that i have some hierarchies and I need to have the
partial sums correctlly computed up to the hierarchy (like some users are
allowed to see only some knots in the different levels of the hierarchies
and the sums must be computed accordignlly).
In mdx i can solve this with the 'WITH MEMBE / WITH SET' statement but I
don't want to generate "by hand" all the mdx in dynasight (the application
is having more than 150 documents).

Thanks,
radu

----
Actinium Consulting GmbH
www.actinium.de

"minimax" <minimax (AT) dynasight (DOT) net> schrieb im Newsbeitrag
news:1116257126.199622.297140 (AT) g44g2000cwa (DOT) googlegroups.com...
Quote:
Hi,

can you store te restifctions of your rules in the (reational)
SQL-Server?

Using dynaSight, you can't get these information in your application
and use for addional restrictions using in all queries?
(via a central object, in every document whith an 'arrow' to each
result-set)
May be this will be faster!

You can also definie the rule, and parse the MDX (from the rule
options) directly into an sql-table, then using the MDAX by the
dynaSight-funcions:

[OBJ1] = contains MDSX
[OBJ2] = SQLTEXT([OBJ1])
AND(1=1;[OBJ2])


Regards
minimax

Administrator of http://www.dynaSight.net
the independent board for dynaSight-users and -developers

-------------------------------------
antares Management Applications GmbH
http://www.antares-mapps.de
mailto:internet (AT) antares-mapps (DOT) de




Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.