Making Dimensions invisible for a role in ssas cube

Hi All,
I have a dimension and I don't want the users of a specific ssas role to use/see this dimension. At moment I am using attribute security by defining a deny member set. Is it possible that the user (belonging to that specific role), while browsing/querying
the cube, can not see the dimension itself?
I can use perspectives but I am looking for some other way, if any.
Nitesh Rai- Please mark the post as answered if it answers your question

Hi Nitesh,
Perspective is not a solution, it's a workaround. SSAS don't provide an opportunity to hide dimension from specific role.
Your issue is discussed
here and
here too.
Best regards.

Similar Messages

Making KF invisible for one timebucket

hello Team
if I want to make a KF visible / invisible based on time period , how can it be possible?
I have done pivot sorting so that my Chars are in rows and KFs are in columns (below time bucket).
If I want to make certain key figures (E.g. Distribution ) as Invisible ONLY for timebucket "Initial" , can it be possible using macro?
I tried using Row_Visible , col_Visible functions but it makes the visible /invisible for all timebuckets.

Hi Guillaume
Thanks for your reply. But this does not work. It makes the entire column invisible.
The view i want is something like this -
Where, some KFs (6M Avg offtake) can be visible only for timebucket = Initial and should be hidden otherwise.
Please help me to solve this

Dimension security is not working if user have two roles in SSAS while connecting from Excel

Hello Genius,
I am facing the issue when user trying to connect the cube from excel if user have more than one role in ssas db.
Role 1: Countryuser, I have implemented the dimension security with country
dimension and countrycode attribute.
Role 2: CityUser, I have implemented the dimension security with
city dimension and citycode attribute.
If user is mapped to any one of above role dimension security is working perfectly according to the logic but mapped to both role, cube is exposing all the data in this case dimension security is not working.
Please give me the solution to fix this issue or incase I am wrong kindly advice.
Thanks
Ganesh

This is the expected behaviour as allowed sets in roles are unioned together.
This is not a problem when your roles are restricting across a single attribute.
eg.
US_role = {[Geography].[Country].[USA]
France_role = {[Geography].[Country].[France] }
as someone in both roles ends up seeing {[Geography].[Country].[USA], [Geography].[Country].[France] }
But when you have different attributes:
NY_role = {[Geography].[City].[New York] }
France_role = {[Geography].[Country].[France] }
The first role is unrestricted on countries and the second is unrestriced on cities which is effectively:
NY_role = {[Geography].[Country].AllMembers , [Geography].[City].[New York] }
France_role = {[Geography].[Country].[France], [Geography].[City].AllMembers }
And when you union those two sets together you end up with:
{[Geography].[Country].AllMembers , [Geography].[City].AllMembers }
Which means that someone in both roles can see everything.
So if you want to restrict someone to City = New York and Country = France you have to create a
single role where both attributes are restricted. So if you have a lot of these combinations you will either have to create a lot of "combination" roles or look at dynamic security.
The other thing that might work is make sure that you only give some users access to certain cities and others access to certain countries. It's the mixing of the two for a single person that causes the issues.
http://darren.gosbell.com - please mark correct answers

Making comments mandatory for only some roles when approving CUP requests.

Does anyone know if there is a way to make Comments required in CUP requests when approving a request for just certain roles? We don't want comments to always be required, just if you are approving a request for Role XXX for example.
I tried using the Comments Mandatory setting that is available on the Role Details screen (along with the associated flags on the Roles/Role Selection screen), but this only seems to require a 'request reason' for the role when the request is being built. It doesn't require comments when the request is being approved. (There also appears to be a bug with this because this request reason doesn't show up anywhere in the request after it is built.)
I know you can set the Comments Mandatory on for the workflow stage, but then you have to enter a comment for every request, regardless of the roles. We are wanting them to required only for a few specific roles.
We are on GRC 5.3 11.2.
Thanks.

Hi Bob,
It is not possible to enable the comment option only for few roles. Either it can be on for all, or off.
Rgds,
Raghu

Dimension Security causing SSAS cube to slow down

Hi,
Experiencing problems with with the SSAS cube once its processed. Sometimes takes around 20 mins for the excel to load once you drag down any dimension.The cube has got no calc scripts/named sets etc.It has around 17 dimensions and one dimension(Employer)
has got 46 attributes and another (member)17.Others are pretty small.The Employer dimension is used twice as role playing and the both employer/member have got dimension security applied to it.There are about 6 roles have been set up to restrict access to
members in these dimensions.
The SQL profiler shows multiple "Query Dimension" (mostly for Employer dimension)followed by a lot of "Calculate Non Empty Current"s .Suspect that the delay is due to the dimension security expression evaluation.This only happens
during first access of the cube within a role and it's relatively quick when I'm accessing via a role which doesn't have dimension security applied to it.Is there anyway to automatically trigger this process right after the cube has been processed so that
it doesn't cause agony to the first user?

You could build a cache warmer that connects with EffectiveUserName=YourDomain\user1 on the connection string and loop through each user. But what is your dimension security expression? Maybe we can speed it up.
http://artisconsulting.com/Blogs/GregGalloway

Defining security on a dimension based on a role

Hi,
I'm using SSAS 2008 R2 with reports on it with Panorama NovaView 6.2. I need to hide a few dimensions and measure groups from a certain group of users. When I'm defining the new role for them I see the only options for dimension set is either "read"
or "read/write". I've tried entering the dimension data tab for the role, choosing an attribute from the dimension I want to hide, and enabling the user to see just the "all" member for that attribute. But when I browse the cube through
SSMS, I see both the attribute and the measure next to it as showing blank and not the total with the "all" member.
I saw older posts proposing to use perspectives, but they're not really security. I already have views based on the entire cube in Panorama and would like to re-use them. Any suggestions?...
With thanks in advance,
Ella

Hi Ella,
According to your description, you want to define security on a dimension, so that different users can see different dimension attributes or hierarchies, right?
As you said, there is no "read" and 'read/write" option on the dimension tab, we cannot set "deny" option for the dimension when creating a role. Based on my research, it seems that there is no a directly way to achieve this requirement. What we can do is
that "Deselect all members" for each attribute of the dimension in Dimension Data tab, which will hide all members of the dimension for the role. Even the dimension metadata is visible in the cube in clients, its members can't be seen. Here are some useful
links for your reference.
http://saysmymind.wordpress.com/2013/01/15/hide-a-specific-attribute-hierarchy-in-role-playing-dimension-ssas-multidimensional/
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/e2596eec-7c2d-48c0-8e81-538a8c632360/hide-dimension-based-on-roles
If you have any concern about this behavior, you can submit a feedback at
http://connect.microsoft.com/SQLServer/Feedback and hope it is resolved in the next release of service pack or product. Your feedback enables Microsoft to make software and services the best that they can be, Microsoft might consider to add this feature
in the following release after official confirmation.
Thank you for your understanding.
Regards,
Charlie Liao
If you have any feedback on our support,
please click here.
Charlie Liao
TechNet Community Support

Insert SSAS Cube records measure and dimensions to relational table

Hi,
I need to retrieve one measure with a couple of its related dimensions from an ssas cube and have it stored in SQL table. How could this be done?
In order to read data from cube and insert into SQL relational table
this thread says to use openquery but states that it will only work if there are measures on the columns
and no dimensions on columns.
Is there a way to query a measure with a couple of its related dimensions
in MDX using openquery? Or any other way to query the cube to get these into SQL?
(Or should I better get the data from the base SQL tables which the cube is built from?)
Thanks for advising
Namnami

Hi Namnami,
Sure Darren Gosbell thread will help you, you can try below things.
You can get more info on
this link
Basically to write SQL+MDX combined we have to create link server from where we want data to combine with SQL. To create link server you need to have Admin access to the SQL Server.
IF IS_SRVROLEMEMBER ('sysadmin') = 1
print 'Current user''s login is a member of the sysadmin role'
ELSE IF IS_SRVROLEMEMBER ('sysadmin') = 0
print 'Current user''s login is NOT a member of the sysadmin role'
ELSE IF IS_SRVROLEMEMBER ('sysadmin') IS NULL
print 'ERROR: The server role specified is not valid.'
Above Query returns the whether you have admin admittance to the server or not to create Link Server.
More Details on Hybrid Query-
USE
AdventureWorksDW2008R2
GO
EXEC
sp_addlinkedserver
@server='Test',
@srvproduct='',
@provider='MSOLAP',
@datasrc='localhost',
@catalog='Adventure Works DW 2008R2'
Declare @MDXExpression as Varchar(MAX)
Select @MDXExpression =
SELECT
NON EMPTY
[Measures].[Sales Amount]
,[Measures].[Standard Product Cost]
,[Measures].[Tax Amount]
,[Measures].[Total Product Cost]
} ON 0,
NON EMPTY
[Sales Channel].[Sales Channel].[Sales Channel]
} ON 1
FROM
[Adventure Works]
Exec ('SELECT * INTO ##TestTemp FROM OpenQuery(TestTest1,''' + @MDXExpression + ''')')
SELECT
CONVERT(varchar,t."[Sales Channel].[Sales Channel].[Sales Channel].[MEMBER_CAPTION]") AS [Date],
(CONVERT(nvarchar,t."[Measures].[Sales Amount]")) AS [Sales Amount],
(CONVERT(nvarchar,t."[Measures].[Standard Product Cost]")) AS [Standard Product Cost],
(CONVERT(nvarchar,t."[Measures].[Tax Amount]")) AS [Tax Amount],
(CONVERT(nvarchar,t."[Measures].[Total Product Cost]")) AS [Total Product Cost]
from
##TestTemp t
--DRop Table ##TestTemp
Query Execution-
1-
So above query first creates liked server with named as 'Test'.
2-
After that MDX query executed on linked server where we have kept the MDX query in MDXExpression variable.
3-
Using OpenQuery function data gets dump in to ##TestTemp table.
4-
Finally we get the data from ##TestTemp table.
Thanks,
Mark as Answer if this resolves your problem or "Vote as Helpful" if you find it helpful.
My Blog
Follow @SuhasKudekar

SSRS Expression Current month in a Fiscal calendar dimension from a SSAS cube

How to create an expression for a default SSRS parameter to a SSAS cube when using i Fiscal Year calendar - and where I want to show current Calendar month and year (for example February 2014)
This is an example of my Time dimension for February 2014:
[Time].[FiscalYMD].[Fiscal_Year].&[2013].&[10]
The fiscal calendar goes from May - May - which means that April 2014
would look like this:
[Time].[FiscalYMD].[Fiscal_Year].&[2013].&[12]
and May 2014 would look like this:
[Time].[FiscalYMD].[Fiscal_Year].&[2014].&[01]
Please advise

Hi HCMJ,
To represent the fiscal calendar, you shift the current date by 4 months back. Then you can do:
="[Time].[FiscalYMD].[Fiscal_Year].&[" & Year( DateAdd( "m", -4, Today() ) ) & "].&[" & Month( DateAdd( "m", -4, Today() ) ) & "]"
It just gets the year and month of '4 months ago'. I have not tested it, but I guess it should work.
Regards
Andrew Borg Cardona

Performance issue in browsing SSAS cube using Excel for first time after cube refresh

Hello Group Members,
This is a continuation of my earlier blog question -
https://social.msdn.microsoft.com/Forums/en-US/a1e424a2-f102-4165-a597-f464cf03ebb5/cache-and-performance-issue-in-browsing-ssas-cube-using-excel-for-first-time?forum=sqlanalysisservices
As that thread is marked as answer, but my issue is not resolved, I am creating a new thread.
I am facing a cache and performance issue for the first time when I try to open a SSAS cube connection using Excel (using Data tab -> From Other Sources --> From Analysis Services) after daily cube refresh. In end users system (8 GB RAM but around
4GB available RAM), for the first time, it takes 10 minutes to open the cube. From next run onwards, its open up quickly within 10 secs.
We have daily ETL process running in high end servers. The configuration of dedicated SSAS cube server is 8 core, 64GB RAM. In total we have 4 cube DB - out of which for 3 is full cube refresh and 1 is incremental refresh. We have seen after daily cube
refresh, it takes 10 odd minutes to open the cube in end users system. From next time onwards, it opens up really fast with 10 secs. After cube refresh, in server systems (32 GB RAM, around 4GB available RAM), it takes 2 odd minutes to open the cube.
Is there, any way we could reduce the time taken for first attempt ?
As mentioned in my previous thread, we have already implemented a cube wraming cache. But, there is no improvement.
Currently, the cumulative size of the all 4 cube DB are more than 9 GB in Production and each cube DB having 4 individual cubes in average with highest cube DB size is 3.5 GB. Now, the question is how excel works with SSAS cube after
daily cube refresh?
Is it Excel creates a cache of the schema and data after each time cube is refreshed and in doing so it need to download the cube schema in Excel's memory? Now to download the the schema and data of each cube database from server to client, it will take
a significant time based on the bandwidth of the network and connection.
Is it anyway dependent to client system RAM ? Today the bigest cube DB size is 3.5 GB, tomorrow it will be 5-6 GB. Now, though client system RAM is 8 GB, the available or free RAM would be around 4 GB. So, what will happen then ?
Best Regards, Arka Mitra.

Could you run the following two DMV queries filling in the name of the cube you're connecting to. Then please post back the row count returned from each of them (by copying them into Excel and counting the rows).
I want to see if this is an issue I've run across before with thousands of dimension attributes and MDSCHEMA_CUBES performance.
select [HIERARCHY_UNIQUE_NAME]
from $system.mdschema_hierarchies
where CUBE_NAME = 'YourCubeName'
select [LEVEL_UNIQUE_NAME]
from $system.mdschema_levels
where CUBE_NAME = 'YourCubeName'
Also, what version of Analysis Services is it? If you connect Object Explorer in Management Studio to SSAS, what's the exact version number it says on the top server node?
http://artisconsulting.com/Blogs/GregGalloway

PFCG, derived roles, create inheritance relation for existing roles

Dear reader,
We have many roles that differ only in the organisational levels, but were not created using the Transaction Inheritance functionality.
Because of the sheer number of these similar roles, making a change in a non-organisational field in these roles is quite laborious.
Such a change is much easier when there is an inheritance relation between a template and all dependent roles.
Is there a way to set up the inheritance relation between a template and it's dependent roles after their creation ?
Kind Regards,
John Hermans

My own thinking what will happen if we combine so and so roles....
I have a other basic question regarding the field values of a A.object.As we know the one particular A.object is related to so many T.codes.Eg:assigning just 1 tcode to a role which contains 5 A.objects(those 5.A.objects are related to so many different T.codes).If we generate the profile for the role it will bring up all the mandatory field values for that specific T.code which is added.Suppose if we assign some values in the fields which are blank(maintain) or even changing the standard values(01,02 standard but deleting those values and assigning 03,04).Will the user gets accesss for the maintained/changed field values ? The reason for asking is ,as we are deleting the mandatory field values of the tcode and assigning some other values which are standard values for some other Tcodes (which are not added in the menu)
Pls excuse me if it confuses ....

Roles in SSAS

Hi ,
Doubt 1:
I have one cube and no roles defined as of now. We got a situation to access the cube to only 10 users . I can see roles option in Cube and as well as I can see the same in SSMS. Which is the best option for creating roles and what is the difference
Doubt 2 :
Preapring ssrs , MDX report. Usually in sql SSRS report we prepare one query for splitting parameter values and after that we join using Join(abc,",") . How we do this in ssrs , MDX reports.
Thanks in advance,
Hari.

Hi Roles in SSAS,
Doubt 1:
The best option to create roles is in the cube itself by the developer. This is because developers tend to change stuff from time to time. What developers than can do is send the role.file to the administrator and he simple has to add memberships
only.
If a roles&members would be made by the administrator, and developers change the role afterwards administrators can than do everything from scratch again. There is of course a workaround where you can save the script once everything is setup, and than
do manual changes in the script to the changes by the developer. If a lot has changed of course you have to do everything from scratch.
Doubt 2: Srry i don't understand the question, can you rephrase or give example pls?

User not able to login for the role

Hello All
We are having 2 properties for the role assigned to user in portal. One is the "Entry Point" and the second one is "Invisible in Navigation Areas". We have customized the standard TLN par for our application. Due to which if we are setting any of the above property to "Yes" then i am not able to login into that role. As we are checking the navigation nodes only in TLN par.
I need that role to be invisble in portal but user should be able to login into that role.
Kindly help as i need to implement it urgently.
Thanks & Regards
Mandeep

Hello Reddy,
I have provided the code we are using to fetch te roles from navigation nodes. Navigation nodes are fetched for only visible roles not for invisible roles. Kindly refer the code and suggest some solution to fetch the heirarchy of the invisible role. In the code "My Purchases" & "Mis Compras" is our role.
<nav:iterateInitialNavNodes currentNavNode="currNode">
                          <% String strCurrentNode = currNode.getTitle(myLoc);
                                    if (strCurrentNode.equalsIgnoreCase("My Purchases")|| strCurrentNode.equalsIgnoreCase("Mis Compras")){
                          %>
                          <%if(levels==2) { %>
                                                
                                                <nav:storeNavNode/>
                          <% } %>
                          <% } %>
                          </nav:iterateInitialNavNodes>
Regards
Mandeep

SSAS Cube Dimension Processing Fails Reporting: File system error: A FileStore error from WriteFile occurred

Hi,
I have a SSAS Cube Database for which the processing had been stopped since the year 2012, but as the requirements have again come up, this cube needs to be processed on a daily basis again, to refresh the cube with new incoming data.
As i was testing the cube processing steps before finally re-activating the cube processing in production, i came across a weird error while doing a manual processing for a Dimension.
File system error: A FileStore error from WriteFile occurred. Physical file: \\?\D:\MSAS10.MSSQLSERVER\OLAP\Data\Citi.184.db\Dim Extended Data.0.dim\54.Extended Data.ksstore. Logical file: . . Errors in the OLAP storage engine: An error occurred
while the 'Extended Data' attribute of the 'ExtendedData' dimension from the 'Citi' database was being processed.
This error came to me while i was doing a process update for the dimension, i even tried to do a Process Full for the same dimension which did not help. I then did a Unprocess and then a Process Full, which didn't work as well.
Can anyone please help me with this issue. I am using the SQL Server 2008 where the cube is hosted and the processing used to work fine earlier, but now its failing with this error.
Thanks

This looks like the 4GB string store limit. If you can upgrade to SQL Server 2012 Analysis Services, you can change a simple setting and grow beyond that 4GB string store limit.
http://technet.microsoft.com/en-us/library/gg471589(SQL.110).aspx
If you can't upgrade, what data is in that ExtendedData attribute? If it's a meaningless surrogate key that you don't need users to see, you can use this trick to avoid the 4GB string store limit:
http://cwebbbi.wordpress.com/2012/08/10/storage-and-the-namecolumn-and-keycolumns-properties/ But if it's something the users need to see, there's not an easy way to fix it without upgrading to SSAS 2012.
http://artisconsulting.com/Blogs/GregGalloway

TS3694 I was making the update for my iphone 4s . then he stops. My phone in this time is in the recovery mode and do not take the firmware to open my phone, please can u help me to recover my phone. My current ios 6.0.1. plese send me some thing that is

was making the update for my iphone 4s . then he stops. My phone in this time is in the recovery mode and do not take the firmware to open my phone, please can u help me to recover my phone. My current ios 6.0.1. plese send me some thing that is useful

Thanks for that 'sberman' - because my iPhone is backed-up to my work computer (only at this stage) I have had to call our IT Department in Adleaide. (4 times this morning). The last guy managed to get the phone into 'DFU Mode' - no more recovery mode screen - (kind of 'asleep' perhaps) from my understanding of same. I am awaiting a call again from IT so they can get my computer to actually recognise my iPhone on the C Drive. This also happened to one of my colleagues in Newman (WA). She got so frustrated with the whole process that she bought another phone the next time she was in 'civilisation.' She hasn't had any problems since. (Cross fingers).
Thanks again, Sandra2474.

Why is iMessage taking my incoming emails and then not making them available for my PC to get? Why can I not send a text msg with photos when iMessage is turned off (but MMS is still on).

Apple is great!
Why is iMessage taking my incoming emails and then not making them available for my PC to get? Why can I not send a text msg with photos when iMessage is turned off (but MMS is still on).
I compose an iMessage with the destination as my email address and I attach 2 photos I want on my PC. I send them several times from my iPhone 5C but they never arrive. I look at my ipad later and realize that it's iMessage app is getting ( and swallowing) these emails. I then turn the ipad off. Still can't get the photos through because iphone is now getting them on it's iMessage. I turn off the iMessage feature and try to send photos from text msging. Phone tells me it can't send photos unless iMessage it turned on. What happened to regular MMS text messaging? I go and try to send photos as an email attachment and see that there is no option to attach from the stupid email program. I look up online to learn about the brave new world of apple attachments and send them.
Why is iMessage taking my incoming emails and then not making them available for my PC to get?
The email program on my iphone is not configured to remove messages from the server.
If iMessage is turned off I don't have the issue.
Why can I not send a text msg with photos when iMessage is turned off (but MMS is still on).

Did not work. I've selected iMessage to ON and left it. After a few hours I recieved a message "activation unsuccessful. Turn on iMessage to try again". This has been going on for the past 3 days.

Making Dimensions invisible for a role in ssas cube

Similar Messages

Maybe you are looking for