Cube Access Rights

If the option “Use for security” for the user is turned on:

then you can set the individual access rights on cubes for that user.

When the user mike opens a report in the report module, a dedicated process OlapExecutor.exe is started on the application server. This process opens a connection to the Microsoft Analysis Services. The connection string will explicitly have “roles” specified like this:

roles=[batidentifier]_user_mike

instead of [batidentifier] there will be the identifier of the application server (you set it during the installation). Therefore, at a logical level for every BAT user there exists a dedicated role.  Such mechanism of access was implemented to be able to set individual access rights on dimensions for every BAT user.

After we created a report module user, we must give him rights on the cubes (otherwise he will not be able to open the reports which get data from these cubes). There are two ways to grant access rights on cube to the user: grant the rights to this user individually (if the option “Use for security” is turned on for this user) or grant the rights to the role the user is in. First we will consider the case of granting access rights for the cube to the individual user. It is possible to do this in two ways.