Analysis Services Roles - Dimension Data

Is there a way to assign dimension data member restrictions within AS 2005 Roles to all attribute hierarchies within a dimension

For example we have a dimension with 4 attribute hierarchies :

Office Code

Office Name

Office Group

Office Overseas

Office Code and Office Name roll up to Office Group (within Office Overseas)

We want to restrict certain Active Directory groups to only see their own office data eg Office Code TOR for Office Name Toronto (within Office Group Canada)

When an AD group is assigned to only see Office Code TOR (by using the Role Dimension Data member restrictions)

Then users in this AD group can still see measure data aggregated for all Office Names and Office Groups (though can only see Office Code TOR)

Do restrictions have to applied separately to all attribute hierarchies within a dimension? This will be difficult for us to maintain, since most of our dimensions are type 1 with members moving (eg the office groups change quite frequently)

Has anyone else come across this issue ?

>Then users in this AD group can still see measure data

>aggregated for all Office Names and Office Groups

>(though can only see Office Code TOR)

But the realy see Values for Toronto, not for all the offices, don't they?

|||

I'm not sure I'm 100% clear on the problem you are having. Are you saying the dimension members are appropriately restricted but the totals reflect non-visible members? For example, if you drill down to Office Code you see just TOR. The total for All Office Code is different than the TOR value?

If this is what you are trying to address, take a look at the Visual Totals setting in your dimension data security. By setting this value to True, SSAS calculate the totals based on just those members you have access to.

Thanks,
Bryan Smith

|||

thanks Bryan

setting the visual totals on the dimension data assignment has resolved this

Mark