Dimension security in SSAS

Hello,
We are trying to report on assets from a DAM platform in SSAS, for which the taxonomy is pretty embedded, reason why in a parent-child relationship I'm having trouble to drill down to the appropriate level since there are like 17 levels. We are trying to
restrict access to only 2 members within our Clients classification. I was able to figure it out in VS and to filter in the dimension security (Roles) to restrict access to the particular clients, but it won't drill down to its children and grandchildren.
I was wondering if there is any MDX which might be able to surface the children and grandchildren. Since the taxonomy is based on GUIDS is really hard to identify which asset stops at which level. Just to make it more descriptive a record can be part of one
or more classifications but it always belongs to a root classification, within a record there are files that can be part of one or more classifications, as well as a file can have several file versions.  I'm trying to see if there is an MDX code
which will allow me to uncover the children and grandchildren of the two members in the Clients classification and restrict access only to those two. Also would there be another way in doing this?
I would appreciate any suggestions.
Thanks,
Andrea

Hi Andrea,
According to your description, you need to restrict access for two members on the hierarchy, however uncover the access permission for the children and grandchildren of the two members, right?
Analysis Services provides a role-based authorization model that grants access to operations, objects, and data. In your scenario, you can unckeck the members on the Dimension Data when creating a role, and keep all the children and grandchildren of the
two members selected.
Regards,
Charlie Liao
If you have any feedback on our support, please click
here.
Charlie Liao
TechNet Community Support

Similar Messages

  • Dimension Security causing SSAS cube to slow down

    Hi,
    Experiencing problems with with the SSAS cube once its processed. Sometimes takes around 20 mins for the excel to load once you drag down any dimension.The cube has got no calc scripts/named sets etc.It has around 17 dimensions and one dimension(Employer)
    has got 46 attributes and another (member)17.Others are pretty small.The Employer dimension is used twice as role playing and the both employer/member have got dimension security applied to it.There are about 6 roles have been set up to restrict access to
    members in these dimensions.
    The SQL profiler shows multiple "Query Dimension" (mostly for Employer dimension)followed by a lot of "Calculate Non Empty Current"s  .Suspect that the delay is due to the dimension security expression evaluation.This only happens
    during first access of the cube within a role and it's relatively quick when I'm accessing via a role which doesn't have dimension security applied to it.Is there anyway to automatically trigger this process right after the cube has been processed so that
    it doesn't cause agony to the first user?

    You could build a cache warmer that connects with EffectiveUserName=YourDomain\user1 on the connection string and loop through each user. But what is your dimension security expression? Maybe we can speed it up.
    http://artisconsulting.com/Blogs/GregGalloway

  • Dimension security is not working if user have two roles in SSAS while connecting from Excel

    Hello Genius,
    I am facing the issue when user trying to connect the cube from excel if user have more than one role in ssas db.
    Role 1: Countryuser, I have implemented the dimension security with country
    dimension and  countrycode attribute.
    Role 2: CityUser,   I have implemented the dimension security with
    city dimension and  citycode attribute.
    If user is mapped to any one of above role dimension security is working perfectly according to the logic but mapped to both role, cube is exposing all the data in this case dimension security is not working.
    Please give me the solution to fix this issue or incase I am wrong kindly advice.
    Thanks
    Ganesh

    This is the expected behaviour as allowed sets in roles are unioned together.
    This is not a problem when your roles are restricting across a single attribute.
    eg.
    US_role = {[Geography].[Country].[USA]
    France_role = {[Geography].[Country].[France] }
    as someone in both roles ends up seeing {[Geography].[Country].[USA], [Geography].[Country].[France] }
    But when you have different attributes:
    NY_role = {[Geography].[City].[New York] }
    France_role = {[Geography].[Country].[France] }
    The first role is unrestricted on countries and the second is unrestriced on cities which is effectively:
    NY_role = {[Geography].[Country].AllMembers , [Geography].[City].[New York]  }
    France_role = {[Geography].[Country].[France], [Geography].[City].AllMembers }
    And when you union those two sets together you end up with:
    {[Geography].[Country].AllMembers , [Geography].[City].AllMembers }
    Which means that someone in both roles can see everything.
    So if you want to restrict someone to City = New York and Country = France you have to create a
    single role where both attributes are restricted. So if you have a lot of these combinations you will either have to create a lot of "combination" roles or look at dynamic security.
    The other thing that might work is make sure that you only give some users access to certain cities and others access to certain countries. It's the mixing of the two for a single person that causes the issues.
    http://darren.gosbell.com - please mark correct answers

  • Shared Members in Dimensions - security question

    Within the dimension security, do shared members take the security based on their base member or on the parent member?
    For example, if we have a base member setup under "Homes" like this:
    Homes > examplehome
    and then a shared member for "examplehome" setup like this:
    Region1 > examplehome(shared)
    And the "Homes" and "Region1" folder have different security setup for iDescendants, will "examplehome(shared)" take the security from "Homes" or "Region1"?

    I've never investigated this but does it really matter? The data for examplehomes is only stored in one place. The share just gives you alternate aggregation paths. My guess is that once you set security for one all instances of the member share the security. After all, if you place examplehomes on a form with no parent, planning has no idea which parent to use.
    Dave

  • IIF condition mdx logic in Dimension security

    Hi,
    I have Organization dimension which has multiple attributes like  District , Region, Corporate.
    I want to show all date for Corporate users, region users to see only their region data and district users to see only their district data.
    Users can be either Corporate , Regional or District user. Only one of these attributes will be True.
    I have to implement this logic in dimension security of Organization dimension under advanced tab using IIF conditions. I am getting confused , can some one help
    Logic will be -
    For Current Logged In User - Check if Corporate Flag is set    
    *True - Show all Organization Members    
    *False - Check if Region No is set     
     *True - Show Organization with Region number equal to current user Region number    
      *False - Check if District No is set             
        *True - Show Organization with District number equal to current user Distric number               *False - Show all Organization members (mostly ESTAT case)

    1. If the MDX query worked, I would assume that you have a valid member expression in the "Region Number" property. It should be something like [Region].[Region Number].[Reg1]. If you just have "Reg1" in the property, you will have to change the MDX like
    below:
    strtoset( "{" + "[Region].[Region Number].[" +
    strtoMember("[User].[Login Id].[smv123]").Properties( "Region
    Number" ) + "]" + "}" ) 
    (a).
    strtoMember("[User].[Login Id].[smv123]") will convert member string expression to a member. Same as
    [User].[Login Id].[smv123]").Properties( "Region
    Number" ). i.e. Quotes are gone.
    (b).
    [User].[Login Id].[smv123]").Properties( "Region
    Number" ) will return as string "Reg1"
    (c) "Reg1" is added to "[Region].[Region Number].[" to make a valid member expression. Complete expression would be : "[Region].[Region Number].[" + "Reg1" + "]"
    (d) The above member string expression is converted to a member set by
    strtoset( "{" + "[Region].[Region Number].[" + "Reg1" + "]" + + "}" )
    (e) So, it is equivalent specifying [Region].[Region Number].[Reg1] in the Advanced security tab. But, since the MDX is evalauted at run time, it will change based on the login id returned by the UserName() function.
    (f) Please make sure that you picked [Region] dimension and [Region Number] attribute to enforce dynamic security
    2. I am not sure how to write IIF logic in the advanced tab of dimension security. It may be possible. The end result of the MDX in the advanced tab should be a valid member or member set.
    regards
    Arun

  • What is Row level security in SSAS?

    Hi All,
    What is row level security in SSAS?
    How many ways to provide security to a cube?

    Implement Dynamic Security by Using Row Filters
    Getting Started with Row Level Security
    Andreas Wolter (Blog |
    Twitter)
    MCM - Microsoft Certified Master SQL Server 2008
    MCSM - Microsoft Certified Solutions Master Data Platform, SQL Server 2012
    www.andreas-wolter.com |
    www.SarpedonQualityLab.com

  • How to get Cube and Dimension ID from SSAS Database programatically

    Hi All,
    I am processing one SSAS cube from SSIS package and processing the cubes dynamically .For this am putting the Cube ID ,Cube name, Dimension ID, Dimension Name in a table and generating the XML programmatically.
     I can right click the properties of the dimension and cube and will get the ID information. But is there any way we can get the ID information programmatically .So that On the fly I will get the information and create the XML without storing
    the these information in table.
    We are using 2008 R2
    Thanks in advance
    Roshan

    Hi,
    Here is the C# code you want. Try it and see.
    using System;
    using System.Collections.Generic;
    using System.Linq;
    using System.Text;
    using System.Xml;
    using AMO = Microsoft.AnalysisServices;
    namespace ConsoleApplication4
    class Program
    static void Main(string[] args)
    AMO.Server oServer = new AMO.Server();
    oServer.Connect(@"Provider=MSOLAP.5;Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=AdventureWorksDW;Data Source=DEVWKS6\MSSQLSERVERMDX");
    foreach (AMO.Database db in oServer.Databases)
    foreach (AMO.Cube cube in db.Cubes)
    Console.WriteLine(System.String.Format("Cube Name : {0} Cube ID : {1}", cube.Name, cube.ID));
    foreach (AMO.CubeDimension dim in cube.Dimensions)
    Console.WriteLine(System.String.Format("Dimension Name : {0} Dimension ID : {1}", dim.Name, dim.ID));
    System.Console.WriteLine("");
    System.Console.WriteLine("");
    oServer.Disconnect(true);
    oServer.Dispose();
    System.Console.ReadLine();
    If you know your target SSAS Database Name, then you could use LINQ to narrow your search. Take a look into the following Code.
    AMO.Database db = oServer.Databases.Cast<AMO.Database>().Where<AMO.Database>(SSASdb => SSASdb.Name == "AdventureWorksDW").FirstOrDefault();
    foreach (AMO.Cube cube in db.Cubes)
    Console.WriteLine(System.String.Format("Cube Name : {0} Cube ID : {1}", cube.Name, cube.ID));
    foreach (AMO.CubeDimension dim in cube.Dimensions)
    Console.WriteLine(System.String.Format("Dimension Name : {0} Dimension ID : {1}", dim.Name, dim.ID));
    System.Console.WriteLine("");
    Best Regards...
    Chandima Lakmal Fonseka

  • SSRS Expression Current month in a Fiscal calendar dimension from a SSAS cube

    How to create an expression for a default SSRS parameter to a SSAS cube when using i Fiscal Year calendar - and where I want to show current Calendar month and year (for example February 2014) 
    This is an example of my Time dimension for February 2014:
    [Time].[FiscalYMD].[Fiscal_Year].&[2013].&[10]
    The fiscal calendar goes from May - May - which means that April 2014
    would look like this:
    [Time].[FiscalYMD].[Fiscal_Year].&[2013].&[12]
    and May 2014 would look like this:
    [Time].[FiscalYMD].[Fiscal_Year].&[2014].&[01]
    Please advise

    Hi HCMJ,
    To represent the fiscal calendar, you shift the current date by 4 months back. Then you can do:
    ="[Time].[FiscalYMD].[Fiscal_Year].&[" & Year( DateAdd( "m", -4, Today() ) ) & "].&[" & Month( DateAdd( "m", -4, Today() ) ) & "]"
    It just gets the year and month of '4 months ago'. I have not tested it, but I guess it should work.
    Regards
    Andrew Borg Cardona

  • Alternative to apply dimension security in Planning?

    Hi all,
    I have created a new application and need to apply the security settings which are in the old version of the application. Is there any other way to do this accept going through Administration --> Dimension. View whether there is security on a member, note that what kind of security and which groups are assigned this security? For instance the Entity and Account dimension are very deep and there are lots of user groups, so it will take me ages to replicate this. Any other way to do this?
    Thanks in advance!
    Mathijs

    Hi John,
    We keep ending up with the error below where it says it failed to get identity for user admin. Do you have any idea what's going wrong? Thanks in advance (we're on version 9.3.1.4)
    Executed command:
    D:\hyperion\Planning\bin>
    ExportSecurity.cmd /A=prdhpl02,/U=admin,/P=password,/S_GROUP=BC-HQ2,/DELIM=!,/TO_FILE=BC-HQ2,/DEBUG=true
    Error:
    D:\hyperion\Planning\bin>ExportSecurity.cmd /A=prdhpl02,/U=admin,/P=password,/S_
    GROUP=BC-HQ2,/DELIM=!,/TO_FILE=BC-HQ2,/DEBUG=true
    Tue Aug 04 16:18:20 BST 2009 :: User Name=admin,appName=prdhpl02,searchCriterian
    ull,userSearchCriterianull,groupSearchCriteriaBC-HQ2,valuesDelimiter=!,fileName=
    BC-HQ2.txt,debug=true
    [04-Aug-2009 16:18:20]: Loading System Properties...
    [04-Aug-2009 16:18:20]: Need to create an Object. pool size = 0 creatredObjs = 0
    [04-Aug-2009 16:18:20]: Intializing System Caches...
    [04-Aug-2009 16:18:20]: Loading Application Properties...
    [04-Aug-2009 16:18:20]: Looking for applications for INSTANCE: []
    [04-Aug-2009 16:18:21]: The polling interval is set =10000
    Tue Aug 04 16:18:21 BST 2009 :: Logging into the application
    Arbor path retrieved: D:\Hyperion\common\EssbaseRTC\9.3.1
    [04-Aug-2009 16:18:22]: Setting ARBORPATH=D:\Hyperion\common\EssbaseRTC\9.3.1
    Old PATH: D:\oracle\product\10.2.0\agent10g\jlib;D:\oracle\product\10.2.0\agent1
    0g\bin;D:\oracle\product\10.1.3\OracleAS_1\jdk\bin;D:\oracle\product\10.1.3\Orac
    leAS_1\ant\bin;D:\oracle\product\10.2.0\client_1\bin;C:\Program Files\Windows Re
    source Kits\Tools\;C:\Program Files\Support Tools\;C:\Program Files\HP\NCU;C:\WI
    NDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\NetIQ\AppMan
    ager\bin;C:\Program Files\NetIQ\Common\bin;D:\oracle\product\10.1.3\OracleAS_1\o
    pmn\bin;D:\Hyperion\common\CLS\9.3.1\bin\windows;D:\Hyperion\FinancialManagement
    \Common;D:\Hyperion\FinancialManagement\Server;D:\Hyperion\common\SAP\bin;D:\Hyp
    erion\FinancialManagement\Client
    [04-Aug-2009 16:18:22]: Old PATH: D:\oracle\product\10.2.0\agent10g\jlib;D:\orac
    le\product\10.2.0\agent10g\bin;D:\oracle\product\10.1.3\OracleAS_1\jdk\bin;D:\or
    acle\product\10.1.3\OracleAS_1\ant\bin;D:\oracle\product\10.2.0\client_1\bin;C:\
    Program Files\Windows Resource Kits\Tools\;C:\Program Files\Support Tools\;C:\Pr
    ogram Files\HP\NCU;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Pr
    ogram Files\NetIQ\AppManager\bin;C:\Program Files\NetIQ\Common\bin;D:\oracle\pro
    duct\10.1.3\OracleAS_1\opmn\bin;D:\Hyperion\common\CLS\9.3.1\bin\windows;D:\Hype
    rion\FinancialManagement\Common;D:\Hyperion\FinancialManagement\Server;D:\Hyperi
    on\common\SAP\bin;D:\Hyperion\FinancialManagement\Client
    New PATH: D:\Hyperion\common\EssbaseRTC\9.3.1\bin;D:\oracle\product\10.2.0\agent
    10g\jlib;D:\oracle\product\10.2.0\agent10g\bin;D:\oracle\product\10.1.3\OracleAS
    _1\jdk\bin;D:\oracle\product\10.1.3\OracleAS_1\ant\bin;D:\oracle\product\10.2.0\
    client_1\bin;C:\Program Files\Windows Resource Kits\Tools\;C:\Program Files\Supp
    ort Tools\;C:\Program Files\HP\NCU;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\Sys
    tem32\Wbem;C:\Program Files\NetIQ\AppManager\bin;C:\Program Files\NetIQ\Common\b
    in;D:\oracle\product\10.1.3\OracleAS_1\opmn\bin;D:\Hyperion\common\CLS\9.3.1\bin
    \windows;D:\Hyperion\FinancialManagement\Common;D:\Hyperion\FinancialManagement\
    Server;D:\Hyperion\common\SAP\bin;D:\Hyperion\FinancialManagement\Client
    [04-Aug-2009 16:18:22]: New PATH: D:\Hyperion\common\EssbaseRTC\9.3.1\bin;D:\ora
    cle\product\10.2.0\agent10g\jlib;D:\oracle\product\10.2.0\agent10g\bin;D:\oracle
    \product\10.1.3\OracleAS_1\jdk\bin;D:\oracle\product\10.1.3\OracleAS_1\ant\bin;D
    :\oracle\product\10.2.0\client_1\bin;C:\Program Files\Windows Resource Kits\Tool
    s\;C:\Program Files\Support Tools\;C:\Program Files\HP\NCU;C:\WINDOWS\system32;C
    :\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\NetIQ\AppManager\bin;C:\Prog
    ram Files\NetIQ\Common\bin;D:\oracle\product\10.1.3\OracleAS_1\opmn\bin;D:\Hyper
    ion\common\CLS\9.3.1\bin\windows;D:\Hyperion\FinancialManagement\Common;D:\Hyper
    ion\FinancialManagement\Server;D:\Hyperion\common\SAP\bin;D:\Hyperion\FinancialM
    anagement\Client
    Setting Arbor path to: D:\Hyperion\common\EssbaseRTC\9.3.1
    [04-Aug-2009 16:18:23]: MAX_DETAIL_CACHE_SIZE = 20 MB.
    [04-Aug-2009 16:18:23]: bytesPerSubCache = 8802 bytes
    [04-Aug-2009 16:18:23]: MAX_NUM_DETAIL_CACHES = 2272
    Setting HBR Mode to: 2
    HBR Logging Config File : HBRServer.properties
    2009-08-04 16:18:23,703 WARN main com.hyperion.hbr.security.HbrSecurityAPI - Err
    or retrieving user by identity
    Embedded HBR initialized.
    [04-Aug-2009 16:18:23]: Regeneration of Member Fields Complete
    [04-Aug-2009 16:18:23]: Need to create an Object. pool size = 0 creatredObjs = 0
    [04-Aug-2009 16:18:23]: Thread main acquired connection com.hyperion.planning.o
    lap.HspEssConnection@1117a20
    [04-Aug-2009 16:18:23]: Thread main releasing connection com.hyperion.planning.
    olap.HspEssConnection@1117a20
    [04-Aug-2009 16:18:23]: Thread main released connection com.hyperion.planning.o
    lap.HspEssConnection@1117a20
    [04-Aug-2009 16:18:23]: Need to create an Object. pool size = 0 creatredObjs = 1
    java.lang.RuntimeException: failed to get identity fo useradmin
    at com.hyperion.planning.HspJSImpl.login(Unknown Source)
    at com.hyperion.planning.HspJSImpl.login(Unknown Source)
    at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
    at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
    at com.hyperion.planning.utils.HspExportSecurityCmd.execute(Unknown Sour
    ce)
    at com.hyperion.planning.utils.HspExportSecurityCmd.main(Unknown Source)
    java.lang.RuntimeException: Unable to aquire activity lease on activity 1 as the
    activity is currently leased by another server.
    at com.hyperion.planning.sql.actions.HspAquireActivityLeaseCustomAction.
    custom(Unknown Source)
    at com.hyperion.planning.sql.actions.HspAction.custom(Unknown Source)
    at com.hyperion.planning.sql.actions.HspActionSet.doActions(Unknown Sour
    ce)
    at com.hyperion.planning.sql.actions.HspActionSet.doActions(Unknown Sour
    ce)
    at com.hyperion.planning.HspJSImpl.aquireActivityLease(Unknown Source)
    at com.hyperion.planning.HspJSImpl.reaquireActivityLease(Unknown Source)
    at com.hyperion.planning.utils.HspTaskListAlertNotifier.reaquireTaskList
    ActivityLease(Unknown Source)
    at com.hyperion.planning.utils.HspTaskListAlertNotifier.processTaskListA
    lerts(Unknown Source)
    at com.hyperion.planning.utils.HspTaskListAlertNotifier.run(Unknown Sour
    ce)

  • Dynamic Dimension Security Error

    Hi Everyone,
    I created a dynamic security in SASS and I use the following MDX in the Allowed Member set:
    EXISTS([Sales Territory].[Sales Territory Group].Members,
    Strtoset("[Users].[User Name].&[" +Username+ "]"),  "User Dim Member Permissions").
    On trying to check the MDX Query I got the following error message:
    Check MDX script syntax failed because of the following error:
    An error occurred in the MDX script for the dimension attribute permission's allowed member set: The dimension '[Users]' was not found in the cube when the string, [Users].[User Name].&[TEST\Bi_svcSetup], was parsed.
    Please can someone assist me with this.
    Thanks
    me

    Hi Lilutchay,
    According to your description, you are trying to implement dynamic security without success, right?
    Based on my research, the issue can be caused by that you implement custom security on database dimension instead of cube dimension. So, in you scenario, please try the same thing on cube dimensions and check if this issue is persists or not.
    Reference.
    http://www.rdacorp.com/2009/01/advanced-dimension-data-security-with-sql-server-2008/
    Hope this helps.
    Regards,
    Charlie Liao
    TechNet Community Support

  • Lost Webform / Task List / Dimension security

    Hi all
    Running 11.1.2.1 - Classic Planning App with Shared Services, Essbase etc.
    Mysteriously (or maybe not so), one of our two applications has lost all of its artefact level security - ie there are no longer any native groups assigned to Dimensions, Webforms or Task Lists when looking at these through Workspace. This is confirmed when users log in with their id's, as they have no access to anything.
    IT team inform me that they were having some database issues this morning, during which I inadvertently carried out a refresh of this application (including security filters). This is the only thing that I can put it down to, although I still cant fathom why this would have the affect it did. Unfortunately (slaps own hand), I didnt take a backup of anything (ie security through SS) before running the refresh.
    After a little testing in our development environment it looks like if I use the 'Security'/'Access Permissions'/'Groups' and 'Users' (when looking at the application through Application Groups / Default Application Group within Shared Services), I can Migrate this from a file backup over the problem application and reinstate the security to webforms etc.
    However I do not have a recent file backup taken manually available to do this.....
    We schedule backups of everything nightly. Is there a particular file we could pick up from last nights backup that would in essence have the same affect as doing the above?
    Thanks for any advice given.
    JB

    John
    Thanks for your response, I have asked our IT team exactly what is backed up and will see what their response is? Is it certain files that we will need to restore if doing this?
    As an update, I tried the method that worked in Dev, in Prod using just a singular group. This failed with this error:
    Errors occured during syncrhonization: [
    com.hyperion.planning.
    HspRuntimeException: An error accurred
    while adding user to Essbase. Please
    check the Essbase log for details., com.
    hyperion.planning.HspRuntimeException:
    A snippet of this log: /Hyperion/Oracle/Middleware/user_projects/epmsystem2/diagnostics/logs/essbase/essbase_0/Essbase.log
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1112987968/Info(1051164)
    Received login request from [xx.xxx.x.xx]
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1112987968/Info(1051187)
    Logging in user [admin@Native Directory] from [xx.x.x.xx]
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1115093312/Info(1051001)
    Received client request: Get Application FrontEnd Type (from user [admin@Native Directory])
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1110882624/Info(1051001)
    Received client request: Create External User With Type (from user [admin@Native Directory])
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1110882624/Error(1051205)
    Single Sign On function call [css_getUser] failed
    [Wed Sep  5 16:39:29 2012]Local/ESSBASE0///1110882624/Warning(1051003)
    Error 1051205 processing request [Create External User With Type] - disconnecting
    Does this shed any light on the problem?
    Thanks
    JB

  • Planning dimension security lost.

    Hi,
    Dimensional security in our planning applications are lost after maintenance.
    There is no pattern in this,, the loss in security for some dimensions is random.
    Do you have any clue what may be the reason for this?
    Thanks..

    This is not the first time I am seeing this issue,
    We had faced this issue in our previous projects also..
    Is it a bug?? We are using 11.1.2
    Edited by: 915237 on Feb 3, 2013 8:51 PM

  • Dimension security question

    I have several dimensions two of which are Scenarios (Actual, Budget, Flash) and Versions (Version1, Version2, Version3). I want to restrict write access to Flash and Version1 while leaving read access on other combinations.
    If I set write acess on Version1 and Flash and read acess on Actual does this restrict the write access to Version1 Flash only or does the Write access on Version1 override the read access on Actual?

    Cross dimensional security is not possible in Planning, If its a read access to a member its same for all the possible combination.
    Cheers..!!!

  • Generic Dimension ( Security Enabled)

    Hi
    When I enable security on a "generic" dimension, is it possible to have the data roll up all the way to the very top ( the actual dimension name)
    For example, i have this type of hiearchy
    Product ?
    Total Product 10 +
    Alt. Product 5 ~
    I would like my users to be able to see the 10 at the "Product" dimension in a pull sheet. Right now, they must change to "Total Product" to see a number. I can't
    figure out how to give them access to "Product" - - - IS IT POSSIBLE?
    Thanks.

    John - thanks for your reply. just a couple of follow ups if you don't mind.
    you say "usually" - could you give me a an idea of what some of the exceptions ? does it matter if it is dense / sparse or dynamic vs never share?
    also - in the essbase add in, when you initally retrieve and it gives the template with top level of each dimension, is it possible to have it start out with the lower level so
    they get a number at first, vs "no access"

  • How to show current date in a column of dimension table in ssas

    Hi,
    I have 2 dimension tables (ALLWORK and YOURWORK) and 1 measure table (STATS). In ALLWORK dim table, I have 4 columns, one of them is END_DATE. Based on END_DATE and current date I want to create a named calculation field. To achieve this, I
    want to show the current date in 5th column (of ALLWORK dim table) as calculated member (as named calculation wont show me correct date).
    Problem is, I am not able to create the column in the dimension table. While creating the calculated member, I am not able to select the ALLWORK dimension table, it always selects MEASURE by default. Please help.
    thanks
    Tarique
    thanks and regards Tarique Aslam

    Hi Tarique,
    According to your description, you want to add a column to your dimension to show the current date, right?
    In data source view, we can add named calculation to your table. A named calculation is a SQL expression represented as a calculated column. This expression appears and behaves as a column in the table. A named calculation lets you extend the relational
    schema of existing tables or views in a data source view without modifying the tables or views in the underlying data source.
    Reference
    http://msdn.microsoft.com/en-in/library/ms174859.aspx
    http://devmau5.wordpress.com/2010/03/25/the-getdate-of-mdx/
    If I have anything misunderstand, please point it out.
    Regards,
    Charlie Liao
    TechNet Community Support

Maybe you are looking for