SSAS 2012 , Role- Limit of users

Hi Experts ,
I am working on SSAS 2012 Cube .
I am implementing Security on my cube for which I have created 2 Roles.
Question: I need to know how many users can be added in one Role (Member Ship Tab)? What is the maximum limit ??

Hi Rihan,
According to your description, you want to know the maximum number of users can be add into a role, right?
Here is a document that the list the maximum sizes and numbers of various objects defined in Analysis Services components under different server deployment modes.
http://technet.microsoft.com/en-us/library/ms365363(v=sql.110).aspx
However, the maximum number of users can be add into a role is not specify on that document. As per my understanding, we can add any numbers of users to the role as we want. In your scenario, how many users do you need to add into this role?
If you really need to know the maximum number, you can open a support case with Microsoft. Visit this link to see the various support options that are available to better meet your needs:
http://support.microsoft.com/default.aspx?id=fh;en-us;offerprophone
Regards,
Charlie Liao
TechNet Community Support

Similar Messages

Single role limit to user

Hello
Some of the users might get more than 300+ single roles to users in production, is that Ok,
This is getting to effect user buffer area ? Please let me your thought and your experience regarding the number of roles limit to users.
Thanks
Damodar

A profile name is 12 characters long and the USR04 field can fit 312 of them into one record before the lights go out.
However... table USREFUS has a field REFUSER also has a length of 12 char yet you can fit another 312 profiles into it...
So the actual limit is 624 profiles.
Technically there is NO LIMIT to the number of roles as some roles might contain only menus or UME mappings or personalization keys. It is only when PFCG noticed that the assigned profiles have reached the limit that it throws an error.
Other UI's for role assignment (such as some tools out there...) do not respect and react to this limitation and let you run into the problems as if it were your own fault.
If a the average user needs more than max 10 roles you should anyway start rethinking / optimizing your authorization concept IMO.
Cheers,
Julius

Windows Server 2012 Standard and Essentials User CAL's

I've been running Windows Server 2012 Essentials in an organization that until recently stayed within the 25 user 50 network device limit specified by the license. Eventually we've grown beyond that. Since the Server 2012 Essentials machine had a non-transferable
OEM license I decided not to waste it by doing an in-place migration to Server 2012 Standard, and instead set up a new server with freshly purchased Server 2012 R2 Standard and migrated Active Domain roles to it, leaving the original server as a part of a
fail-over cluster.
We purchased 30 User CAL's for the 2012 R2, as required for 25+ staff members.
Now I am curious. The 2 servers that we have right now (2012 R2 Standard and 2012 Essentials) both maintain the same Active Directory and manage the same pool of users and workstations. Does that mean that the primary server with 30 User CAL's takes dominance
and sets the limit as to how many people are allowed to access the network. Or does it become a combination of purchased 30 CAL's + 25 Users hard-wired into the 2012 Essential edition?
Do these servers have to run separate domains with segregated pools of users in order to be license compliant for 30+ users or can they exist within the same same domain preserving individual user limits? What if the 2012 Essentials server maintains
one office location with fewer than 25 staff and the Standard R2 2012 server runs another office with fewer than 30 staff, while both offices are linked via a VPN for the purpose of sharing 3rd party licenses? Do individual user limits apply, or is it still
30 users max?
To sum up the question, I'd like to know whether I'd need to buy more user CAL's when we reach more than 30 staff at 1 or possibly 2 office locations.
Oh, and the device limit! 2012 R2 Standard under user CAL licensing scheme has no machine limits. Essentials is always capped at 50. When running one active directory, what's the legally allowed number of devices on the network? I assume it's unlimited.
Thanks.

Thank you for the reply.
My question then is how to transition while preferably keeping both physical servers.
Should a 2012 Standard key be purchased additionally for an in-place transition of 2012 Essentials machine to 2012 Standard (which at this point is as good as a fresh install)? Until then, should the Essentials 2012 server be taken offline entirely?
What about the situation where I described both servers running segregated networks with their own pools of users, only connected via a VPN for 3rd party license sharing? Is that configuration supported?
Also, if the configurations is unsupported, why are the servers able to share roles in first place? Why isn't there a software mechanism preventing interaction? What configuration do the servers themselves assume is in place?
Thanks again.

How to count direct plus indirect roles assigned per user (8.1.7.4) ?

Hi, because of the 148 max roles limit in 8.1.7.4 (and because we use Noetix that generates many roles !), we would like to build a query that can be used as an alert and that tells us the following: Number of roles (direct and get from inheritance of roles).
For instance:
user howmanyroles
Fred 12
Noetix 125
..

1.-
2.c
3.a
4.a
5.c
6.b
7.a
8.d
9.b
10.a -
11.a
12.c
13.b
14.d
15.c
16.a -
17.a
18.d
19.c
20.a
21. -
22.d
23.b
24.?
hope it helps u.
Thanks
Kuljeet

SSAS 2012 Tabular Error: The operation was cancelled because of locking conflicts

I have a 800 mb SSAS database that I refresh(Process current day partition) every 30 minutes. As soon as the processing starts all my users get error The operation was cancelled because of locking conflicts. I ran the deadlocks trace as described in http://blogs.msdn.com/b/sql_pfe_blog/archive/2009/08/27/deadlock-troubleshooting-in-sql-server-analysis-services-ssas.aspx
but all I see is the processing start and all the users getting the error ("The operation was cancelled because of locking conflicts") 22 mil sec after the processing starts.
I also ran "select * from $system.discover_locks" but I only see lock types 2,4 and 8. None of which seem to be exclusive
This is SSAS 2012 with sp 1
Database Architect

Hi Derek,
According to your description, you get the dead lock error when processing partition. Right?
In Analysis Services, this error occurs when lock manager detects a dead lock. Lock type 2,4 and 8 can also have two transactions waiting each other and cause deadlock. In this scenario, please check the Dead Lock Graph in SQL Profiler
and find the related processes. Check what the processes work for to see if you need to do parallel processing or process other objects before partition processing.
Best Regards,
Simon Hou
TechNet Community Support

Getting the role of the user running the report?

Hello,
I'm doing a report with Answers and need to recover the role of the user running the report. Is it possible?
Thanks

You can use any of the below Session Variables, click the Fx and enter the below
VALUEOF(NQ_SESSION.displayname) - Displays the Full Name of the User that is logged in and running the report for that session
VALUEOF(NQ_SESSION.user_alias) - Display's Alias Name of the User that is logged in and running the report for that session
For the role, I don't think there is a Session Variable.
Cheers!
Royston
Edited by: Royston Goveia on May 24, 2012 12:50 AM

SSAS 2012 Tabular. Analysis Services Query Log not working

Hello.
It is possible to configure Analysis Services Query Log on SSAS 2012 Tabular (11.0.3321) server? Or this feature works only with Multidimensional server mode?
It is not a problem for me to configure Query Log on Multidimensional server. But when I'm trying to do this in Tabular server result is always the same: table S_OlapQueryLog created but no data there.
This problem exist in our production server. And is fully reproduced in test environment. This problem was reproduced with SQL 2012 RTM, CU4, SP1 and SP1 CU1.
I tryed to configure Analysis Services Query Log by using SQL account. Later by using windows authentification. Accounts was db owners. Later I have used accounts with sysadmin rights. Results was the same.
In msmdsrv.log i can find only related events like this:
(12/7/2012 9:22:59 PM) Message: The query log was started. (Source:
\\?\P:\Olap\Log\msmdsrv.log, Type: 1, Category: 289, Event ID: 0x41210003)
(12/7/2012 9:25:03 PM) Message: The query log was stopped. (Source:
\\?\P:\Olap\Log\msmdsrv.log, Type: 1, Category: 289, Event ID: 0x41210004)
I'm stuck completely with this functionality. So if someone was much luckier than I please write to me.
Regards
Audrius

I agree with Gerhard's comments, but there are a couple of additional points
- I am not 100 percent sure if queries that are answered by the SE cache are recorded in the query log
Queries answered by the SE cache are not definitely not recorded in the QueryLog. So depending on the types of queries and the design of your cube you could possible miss a large proportion of the actual end user queries.
The QueryLog records the QuerySubcube events and there are zero to many of these generated for a given end user query (zero if the query can be answered from cache). The optimizer may also choose to pre-fetch a wider range of data or to break a single range
into a few smaller requests so it is not a true indication of the actual query that the end user generated.
Doing a trace is the only way to catch the actual queries submitted by end users.
http://darren.gosbell.com - please mark correct answers

Help with copying permissions and roles from one user to another. Issue with RoleDefinitions

I need help please.
I’m trying to copy a role definition/name in SharePoint 2010 Powershell.
The below is only a piece of my script, but I have to find '$SearchUser" and wherever it lives (webs, lists, groups), I need to add "$account" and copy permissions
from '$SearchUser" . We are doing this to limit certain users from access our farm (by adding a new AD domain that does not contain these users, then deleting the old domain).
Every time I run it, it seems to mess up on this line:
$role = $web.RoleDefinitions.[$newRoleDef].
It is acting like the $newRoleDef is null, but it is not.
When I outputfile the $newRoleDef, it has values, such as Read, Contribute.
foreach($Web in $Site.AllWebs)
if($Web.HasUniqueRoleAssignments -eq $True)
foreach($WebRoleAssignment in $Web.RoleAssignments )
if($WebRoleAssignment.Member.userlogin)
if($WebRoleAssignment.Member.LoginName -eq $SearchUser)
$WebUserPermissions=@()
foreach ($RoleDefinition in $WebRoleAssignment.RoleDefinitionBindings)
$newRoleDef = $RoleDefinition.Name
$assignment = New-Object Microsoft.SharePoint.SPRoleAssignment($account)
$role = $web.RoleDefinitions.[$newRoleDef]
$assignment.RoleDefinitionBindings.Add($role)
$_.RoleAssignments.Add($assignment)

Hi,
Glad to hear that you solve this issue, thanks for your sharing.
Thanks,
Linda Li
Linda Li
TechNet Community Support

From which table we can get the Role of the User in SRM

Hi All,
I need to prepare a report which displays the user and his role in srm. So from which table i can get the role of the user if i have the Userid.
Thanks
Channappa Sajjanar

Hi
t- code
SUIM->rOLES->BY USER ASSIGNMENT
SELECT WITHASSIGNMENT OF USER = username
AS A OUTPUT YOU MAY GET ROLE ASSIGNED TO THAT USER.
if you want which FM - you debug while executing this report.
regards
Muthu

Installed the RDS 2012 Server License per user CAL (5pcs) after not allow over two users remote desktop connection problem

I have successfully to installed the RDS 2012 Server R2 per user CAL (5pcs) Open License after is found not allow over two users to remote desktop connection on this Server problem, I try to uninstall the license and then (internet on-line & telephone
call Microsoft Activate Center get the activate key) to reinstall is still same of the result on below problem.
Select a user disconnect so that you can sign in.
There are too many users signed in
User1 Active
User2 Active
() Force disconnect of the user

Hi,
In addition you can also refer following article for RDL configuration.
RD Licensing Configuration on Windows Server 2012
http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Error while assigning the role to the user

Hi,
error : CJS-30196. SAPBC JSF Communication role is not assigned to the user SAPJSF.
i am getting the fallowing error in installation with NW04S. while trying to assign the above role to the user.any body help me with the solution.
Thanks & Regards
kiran.B

Duplicate Post

Assigning roles to 10000 users

Hi Guru's,
I need your solution regarding role assignment to 10000 users.My client is having 10000 users.
My perception for this is
[Role]
Roleid = Path;
user = user1;user2;user3;...............user10000;
Writing above code in text document and importing then exporting in user administration.....
Is there any approach to assign a role to 10000 users in one go.
Please share the solution for this issue.
Regard's,
Prashanth

You can use the Import functionality of User Administration.
Use Groups as principal.
Example
[group]
gid=Z_GRP_HR_ESS
gdesc=HR Group for Employee Self-Service
user=DHANZ1;DHANZ2;.......
Import utility times out for huge user base....so split 10000 in 2 batches...eg first load with 7000 users and second with 3000 users.
Second run do it in overwrite mode
Once the loads are complete you can manually assign the corresponding Roles to the Group. It is best practise to assign
Users -> Group -> Role.
Also you get a detailed log after import with errors -> You can fix that in your import file and run the utlity again.
Good luck ~ Dhanz

Assigning roles to LDAP users through BIP API

Hi.
My customer has BIP 11g and OIM 9.1.0.2 running on the same weblogic server (11g). Both authenticate against the same LDAP server.
One of our desired next steps is to provision from OIM the BIP roles to each LDAP user so every user gets the correct roles (and access to the correct reports) according to the groups he has on OIM.
I've been searching for info regarding this without success. The BIP API doc does not show any info about assigning roles to users.
We don't need to manage LDAP users, BIP roles, etc... through OIM. We only need to assign BIP roles to LDAP users.
Is it possible to make that assignments through BIP API?
If not, any other ideas? New ideas or different approaches are welcome.
Thanks in advance.

In OBIEE 11g which includes BIP the application roles are applied to LDAP users and groups using the Enterprise Manager Fusion Control.
During the upgrade process from OBIEE 10g to OBIEE 11g the groups do get assigned to these roles transparently so there must be some API to leverage this functionality.
I would start there, http://download.oracle.com/docs/cd/E14571_01/bi.1111/e10541/admin_api.htm
There are no specific instructions on accomplishing what you seek but if you have some WLST or Java Skills you should be able to get something prototyped.
Let me know if that helps.

Error while assigning the fallowing role to the user

Hi,
ERROR 2007-01-18 14:13:25
CJS-30196 Role SAP_BC_JSF_COMMUNICATION_RO is not assigned to user SAPJSF
i am getting the fallowing error while trying to assigning the fallowing role to the user any body through some light in to it.
Thanks
kiran.B

Hi,
Standard roles are not assigned to users directly.Make sure that copy the role from standard roles then change naming convention like your company specification.
Ex: standard role : SAP_BC_JSF_COMMUNICATION_RO
Step:1: go to t-code: PFCG and give the role name in role tab SAP_BC_JSF_COMMUNICATION_RO
Step:2: press copy button and change the naming convention.
Step:3: Assign to the user.
I hope it will help you.
kiran kumar.v

Assigning roles to different users in GP

Hello,
We have developed a small application using CAF.The UI part is done using Webdynpro module which is a part of CAF project. Now we have to apply Guided procedures to this application .
I have followed steps in this link to create a process (My First Process), and got result.
http://help.sap.com/saphelp_nw04s/helpdata/en/4a/d78041a17e060de10000000a1550b0/content.htm.
Now I have to do the same for our application.For eg: In "My First Process" , the role of Applicant is assigned to one user, and the role of HR Manager is assigned to another user.
In our application, many people has done modules.I want to create different roles (like applicant ,HR Manager in My Process) and assign each role to the user who has developed that module.
Actually we are not using NWDI . But we integrated all modules into one application manually.Is it possible to achieve the above mentioned goals ?
Please any one give me a suggestion or link.
With Thanks,
Vivek
With Thanks,
Vivek

Hi Ashutosh,
Thanks for response and providing link.
I have followed the documents provided by you.
Now I have to do the same for our application as in "My First Process" , the role of Applicant is assigned to one user, and the role of HR Manager is assigned to another user.
Do I require to follow the steps,
step1 :In GP design time and choose Create Callable Object Type Process Control, and select Visual Approval.
step2 :For the purposes of the process that you create, define the same input parameters as the output parameters that you have defined for the data input form.
In our application already created views(webdynpro views) are there.Still we need to create data input form and define input and output parameters ?.
In our application, many people has done modules.I want to create different roles (like applicant ,HR Manager in My Process) and assign each role to the user who has developed that module.
Please any one give me a suggestion or link.
With Thanks,
Vivek

SSAS 2012 , Role- Limit of users

Similar Messages

Maybe you are looking for