Using Pivot-Slicers on a SSAS Cube with Access Rights

Dear all,
we're using a SSAS Cube and try to access the data by an Excel Pivot. That works fine.
Furthermore, we are using the slicer feature of Excel 2010 to select the specified data.
The problem is that we have a dedicated rights concept and only some users are allowed to see all dimension elements. Other users are not allowed to see all the data. This is ok and works for Pivots, as we can see there only the elements which the respective
user is allowed to see. In the case of slicers this doesn't work: the slicers always show all dimension elements (the restricted ones with 0-values). Can this somehow be repaired, so that the user only sees the elements in the slicer he's allowed to see?
Best Regards
Bjoern

Hi Charlie,
I guess we have some kind of language barrier here because i did not fully understand your explanation.
I've got a User Günther who is only to allowed to see the revenues of his own company.
Therefore, he has got a restriction on the company-dimension, which has 100 companies. He is only allowed on his own company.
If we open a new pivot with the company dimension, he will only see 1 column (with his company) instead of 100.
If I currently add a slicer to the pivot, the list of elements in the slicer contains 100 companies. All of them are also shaded (which shows, that data is available). If i click on a shaded company, on which he is not allowed, Günther only sees zero-values
(0,00).
In this case, it would be better to only see the 1 company the slicer shaded, which has values that Günther is allowed to see. Then, he would only see his own company shaded and 99 would have the look like being "without data".
If my proposal would be impleneted, it would be much easier to use excel BI services on a big SSAS cube with multiple dimensions and multiple users that have different access rights.
The best would be, if a slicer could be customized in more details (e.g., with a mdx query).
// Do I perhaps have misplaced the question into the wrong forum?
Best Regards
Bjoern

Similar Messages

Can Play iTunes Library from PC on MacBook Air but cannot import, problem with access rights?

I can play Itunes library from Windows Vista PC on my MacBook Air using homeshare but cannot import the library . Error message is problem with access rights. Latest OS and Itunes installed. Both computers registered with Apple on same Apple ID. Wifi Router turned on and off. Still does not allow importing. Any suggestions please?

Might be an alternative for you here > iTunes: How to move your music to a new computer

Problem with access rights by using UTL_FILE

Hi all,
Could you please help me with the following problem. A search on this forum did not result in the final solution:
- We are using an Oracle XE database on an Oracle VM instance
- I want to export a lot of data to the filesystem, by using UTL_FILE.
- The package that calls UTL_FILE, should be installed in the database schema 'XXCUST'.
- I have created a folder '/home/oracle/XX_EXPORT_FOLDER' on the filesystem
- I have created a database directory 'XX_EXPORT', which links to this folder
- I have granted read and write to public for this folder
- I use the following script to export the files:
DECLARE
l_file_handle UTL_FILE.FILE_TYPE;
BEGIN
l_file_handle := UTL_FILE.FOPEN( location => 'XX_EXPORT', filename => 'test.txt',open_mode => 'W', max_linesize => 100);
UTL_FILE.PUT_LINE(l_file_handle, 'TEST');
UTL_FILE.FCLOSE(l_file_handle);
END;
When I run this script with the user 'XXCUST' I get the following error:
ORA-06521: PL/SQL: Error mapping function
ORA-06512: at "SYSTEM.UTL_FILE", line 41
ORA-06512: at "SYSTEM.UTL_FILE", line 478
ORA-06512: at line 15
06521. 00000 - "PL/SQL: Error mapping function"
*Cause: An error was detected by PL/SQL trying to map the mentioned
function dynamically.
*Action: Check the stacked error (if any) for more details.
When I run this script with the user 'sys as sysdba', I don't get any errors. My testfile is created successfully.
What should I do to use this script with user XXCUST?

What are the permissions on this folder:
/home/oracle/XX_EXPORT_FOLDER

Unable to set NTFS permissions on share using PowerShell. The user shows up with no rights checked off.

I am having a little problem here with setting NTFS permissions via PowerShell.
Basically I am able to make a new directory on the share, and assign a user NTFS permissions however it just assigns the select user without any permissions set.
$username = "test.user"
$directory = "\\testlab-sv01\Share\newfolder"
New-Item -Path $directory -ItemType Directory
$colRights = [System.Security.AccessControl.FileSystemRights]"FullControl"
$InheritanceFlag = [System.Security.AccessControl.InheritanceFlags]::ContainerInherit
$PropagationFlag = [System.Security.AccessControl.PropagationFlags]::InheritOnly
$objType =[System.Security.AccessControl.AccessControlType]::Allow
$objUser = New-Object System.Security.Principal.NTAccount("$username")
$objACE = New-Object System.Security.AccessControl.FileSystemAccessRule($objUser, $colRights, $InheritanceFlag, $PropagationFlag, $objType)
$objACL = Get-ACL $directory
$objACL.AddAccessRule($objACE)
Set-ACL $directory $objACL
A side question, why isn't this native in Powershell? Is it for security reasons? I expected there to be a cmdlet for it.
Thanks.
Kyle

When you say there are no permissions, do mean that the ACL Editor is showing 'Special permissions' and none of the other boxes are checked?
Try changing the inheritance and propagation flags to this:
$InheritanceFlag = [System.Security.AccessControl.InheritanceFlags] "ContainerInherit, ObjectInherit"
$PropagationFlag = [System.Security.AccessControl.PropagationFlags]::None
That sets the ACE to apply to the folder (InheritOnly propagation flag isn't set) , subfolders (ContainerInherit inheritance flag is set), and files (ObjectInherit inheritance flag is set), which is necessary for the ACE to not be considered 'special' in
the ACL Editor.
Awesome. Thanks. That did work.
And yes I did mean that it was showing special permissions with nothing checked.
Kyle

Can either the Airport Express or Airport Extreme be used "standalone" to create a wireless network with access to the internet?

I want to create a wireless network for my iMac, Macbook Pro and iPad, and I'm confused about the Airport Extreme and Airport Express devices.
There is mention for both about connecting them to a DSL or Modem. Does this mean I have to obtain additional hardware before they will enable connection to the internet? (In the past, I've used a Belkin Router, which simply connected to the phone line.)
Any advice gratefully received.
Tony

Does this mean I have to obtain additional hardware before they will enable connection to the internet?
Yes, you need a modem. The AirPorts are routers only. They do not have a modem built in, so you will need a modem if you want to be able to connect to the Internet.
The Belkin device that you have used before is a modem/router. It combines the functions of a modem and router in one package.

BAPI to get a user list with access rights to particular objects

Hi Experts,
BAPI to get all user lists for input specific object, authorizations, profiles and values?
Any useful answer will be rewarded with suitable points.
Thanks,
Rohan

Hi Rohan
Use the BAPI:
BAPI_USER_GET_DETAIL
Regards,
Sree

Problem with Access Rights

I have some folders that I'd like to share with 1 of the 3 other users on my mac. I created it in the shared documents folder, and then when to change permissions. I was able to give the other user read and write access to it. Staff does not seem to have a option for "No Access" I only have three choices, drop box, read only and read and write.
On a multi user machine, how can I successfully share a folder with 1 other user?

donv (The Ghost) wrote:
V.K. knows. Still, I am thinking that you could just delete the group that you want to have no access in sharing under get info for the folder.
that's what I would have thought too but it doesn't let me when I try it.
strike that. if I unlock the lock in the get info window I can remove the staff group from sharing but the group on the folder changes to wheel from staff as can be seen from terminal. this is wrong as no user except root belongs to wheel. it's an old bug present in leopard which is still not fixed in snow leopard. therefore, the terminal method suggested in my other post is still the best option.

Problem with access rights in web forms

Hii am facing the problem in giving access rights to users inplanning application.i gave write access to all my forms and all my users were giveninteractives user access.but when users tried to open to the forms. they are getting thefollowing error Security and/or filtering has resulted in a requireddimension not being represented on this form i don't where i am missing. please help. thanksBalu

Balu, 1)Check if the security filter have been refreshed. 2)Check if all the members from all dimensions are defined on the webform Thanks..

BAPI to get all user lists with access rights to particular objects

Hi Experts,
Is there any BAPI to get all input related user lists for input specific object, authorizations, profiles and values?
Thanks,
Rohan

Hello,
BAPI_USER_DISPLAY Display users
BAPI_USER_GET_DETAIL Read User Details
Vasanth

SSAS Cube Connection with SAP BO IDT

Hi Guyz,
I have one requirement where i have to connect the SSAS cube with SAP BO along with cube security.I was able to connect the SSAS cube with the help of IDT using cube's Dll file , but i couldnot able to implement cube security in my SAP BO environment. The security incides the specific roles which are there in cube. My connection is not implementing the security which is there in cube.
Kindly , provide any insights if anyone have on these.
Thanks in Advance.
Shweta

Dear, Roberto,
Our user has Full Access to all BPC tasks and it is administrator in BI system.
Also we can successfully connect with the same user using Connection type "Local".
We had done some investigation and in the BPC SQL Server trace log we can catch the following message when an error occurs:
==============[System Error Tracing]==============
[System Name] : BPCXMLAService [Message Type] : ErrorMessage [Job Name] : ValidateUser [DateTime] : 04/23/2014 10:58:06 [UserId] : [Exception] DetailMsg : {System.Exception: Invalid user at SAP.BPC.Services.Webservice.XMLAService.XMLAService.ValidateUser()} ==============[System Error Tracing End ]==============
It is very interesting that after the EPM workbook is launched via BI Launch Pad till an error occurs we are NOT provided with possibility to enter any username and password. So the EPM add-in should use the same user which was logged into BI Launch Pad - in our case the user with administrative rights both in BI Launch Pad and BPC systems. Am I missing anything?
Looking forward your feedback.
Thank you in advance.
Best regards,
Donatas

What is the use of Data packet dim with Virtual cube with services

Hi Friends,
Could anybody tell me what is the use of Packet dimension in Virtual cube with services , It cannot contain data persistently ,Just fetch at runtime,Then there is no Physical load happening,Then why it should be automatically created for this??
Message was edited by: Pradeep choudhari

Hi Maik,
Unit dimension will not be created automatically until and unless you have keyfigure referning units..
But my question is : Why should we have data pack dimension , which is useless in this case of Virtual cube with services.It should not be created automatically!! What do you say??

SSRS Date parameter - current month from SSAS cube

I have a SSAS cube with a date dimension called Posting Period and now I would like to have my report parameter using this date dimension to show the current month.
So far I have worked out the following expression which are working(Fiscal year calendar going from May to May) for the year component - but I can't figure out how to get it to work on Quarter date part (and the month) so as you can see
the Quarter and month is hardcoded in the below expression:
="[PostingPeriod].[Posting Period].[Year].&[" + CStr(Year(Today())-1) + "].&[Q4].&[10]”
Any help would be appriciated.
Tx

Hi HCMJ,
In your scenario, you use the expression
="[PostingPeriod].[Posting Period].[Year].&[" + CStr(Year(Today())-1) + "].&[Q4].&[10]”
to set the default value of the parameter and then use it in the MDX query, right?
If in this case, you can use the expression below
="[PostingPeriod].[Posting Period].[Year].&[2013].&[Q" & DatePart(DateInterval.Quarter,today()) & "].&[10]”
to set the value on Quarter date part.
And it returns:
If I have anything misunderstood, please point it out and elaborate the meaning of "but I can't figure out how to get it to work on Quarter date part (and the month) so as you can see the Quarter and month is hardcoded
", so that we can make further analysis.
Regards,
Charlie Liao
TechNet Community Support

How to tune performance of a cube with multiple date dimension?

Hi,
I have a cube where I have a measure. Now for a turn time report I am taking the date difference of two dates and taking the average, max and min of the date difference. The graph is taking long time to load. I am using Telerik report controls.
Is there any way to tune up the cube performance with multiple date dimension to it? What are the key rules and beset practices for a cube to perform well?
Thanks,
Amit

Hi amit2015,
According to your description, you want to improve the performance of a SSAS cube with multiple date dimension. Right?
In Analysis Services, there are many tips to improve the performance of a cube. In this scenario, I suggest you only keep one dimension, and only include the column which are required for your calculation. Please refer to "dimension design" in
the link below:
http://www.mssqltips.com/sqlservertip/2567/ssas--best-practices-and-performance-optimization--part-3-of-4/
If you have any question, please feel free to ask.
Simon Hou
TechNet Community Support

Problem with SSAS cube reporting action when using pivot filter with cubevalue function

Hi everyone,
I have a quite specific problem when I combine cube actions (Reporting Action SSRS) with Excel's cubevalue() function.
The problem is when I use a pivot filter as a parameter for the cubevalue() function. The action item does not show up in the context menue.
The cube action works fine when I do it from a "normal" pivot or if I use the cubevalue() function without the reference to a pivot filter (all the parameters in the function are "hard-coded").
I use SSAS 2012 and Excel 2010.
Thanks for yor help.
Gerhard

Hi everyone,
I actually figured out a way to solve this problem. I had to use a detour to solve this bug in Excel (at least I think it's a bug).
What I needed to do: I had to make Excel belive that the filter is actuall hard-coded and does not come from a pivot filter. This was only possible by adding a new calculated measure to the cube that gives back the MEMBER_Unique_Name to the current member
passed. This "value" can then be used to go back to the cube and select the cubemember function. Here is a small example.
This is the cube member:
CREATE MEMBER CURRENTCUBE.[Measures].[RegCompBranNameKey] AS
[Company Branch].[Reg - Comp - Bran Name].CurrentMember.Properties("MEMBER_UNIQUE_NAME", TYPED),
VISIBLE = 0 ;
And this is then done in a hidden Excel cell:
=CUBEMEMBER("Metrics";
IF(RIGHT(CUBEVALUE("Metrics";<PivotFilter>;"[Measures].[RegCompBranNameKey]");5)="[ALL]";"[ALL]";
RIGHT(CUBEVALUE("Metrics";<PivotFilter>;"[Measures].[RegCompBranNameKey]");LEN(CUBEVALUE("GlobalMetrics";<PivotFilter>;"[Measures].[RegCompBranNameKey]"))-57)
I had to use the UniqueName property because I have a combined filter. That's also the reason for this truncation and also useing the last part of it. If you just have a straight key you more easily use it.

Using FORMAT_STRING from SSAS cube - not working consistently

Here's the deal.
I've got an SSAS cube and I am scoping the format of the measures based on dimension members.
Like this.
scope(( [Account].[Level 5].&[I000900000] ));
format_string(This) = "(#,0,);#,0,";
end scope;
I'm then calling this format in the SSRS report using typical SSRS trickery and hacks.
Well. When I run the report for one date (this is a GL financial cube), this works perfectly. When I run the report for a different date, it all of a sudden doesn't work. When I view the data in excel through a pivot table, everything is fine.
It's driving me crazy. Has anyone else experienced something like this.

Hi Baracus,
Thank you for your question.
I am trying to involve someone more familiar with this topic for a further look at this issue. Sometime delay might be expected from the job transferring. Your patience is greatly appreciated.
Thank you for your understanding and support.
Regards,
Charlie Liao
TechNet Community Support

Using Pivot-Slicers on a SSAS Cube with Access Rights

Similar Messages

Maybe you are looking for