Reputation: 691
I have implemented the Dynamic Security in our BI-SSAS Projekt using a User-Dimension that is updated from Active Directory. I created SSAS-Roles and inside I restrict the users to see only the specified branches.
As Front-End they are using Excel. The problem is that Excel does not use as default the SSAS-Role created so I need to modify the conection string and add the following Property:Extended Properties="Role=PowerUsers"
.
How can we use the role created without having to edit the conection string from excel ? Could be this Excel connection string property added as default?
Upvotes: 1
Views: 1285
Reputation: 11625
Why doesn't Excel use the right role if you remove Roles= from the connection string? Is the user in question an SSAS admin? Are you 100% sure? If you connect Profiler to SSAS and watch while that user connects it should list the roles the user belongs to. If the roles say *,PowerUsers,Readers then the asterisk means the user is an admin. If you remove him as an admin you won't need to specify Roles on the connection string.
You might also install BIDS Helper and run the Roles Report on your cube. It will expand the security groups in case that user is in a group you weren't aware of.
Upvotes: 1
Reputation: 156
There is not directly way in the standalone Excel pivot table, but there are a couple of potential approaches you can try: 1) Save the connection string (file) in a shared folder where your users can access it all, you don't have to modify anything in Excel once you specify that file(folder), but you still have to modify that file in the folder. (not good but should be okay) 2) 'IF' you are using SharePoint excel service, the thing is simple: just create a SSS, all can be managed under SharePoint SSS
Upvotes: 0