Access denied to the cube

C

crook

Hi,

I've followed the thread "Access denied to the cube
MSP_PORTFOLIO_ANALYZER." started by Renee IT/PM with interest. We,
too, have had trouble with cube permissions.

My simple question is: is there any other way to grant access to the
cube other than adding users or groups to the Analysis Services "Manage
Roles ..." dialog?

Background: In June of 2005, a consultant came to reconfigure MSPS2003
for us. Good guy, he did a great job. But much of what he did went
over my head, and I'm only now catching on. Anyhow, in March, the
account in OLAP Administrators, used by our COM+ objects, became
disabled for reasons unknown. We got the account reenabled and quickly
found that no one had access to the cube. We then found instructions
on how to add users or groups to the AS role, thereby granting access
to the cube. The thing is, I didn't have to explicitly add users to
the cube prior to losing the account in OLAP Administrators. I could
add new users to our PM role in Project Server, and permissions to the
cube were automatically granted.

I'm quite willing to add another step to my new PM checklist if
necessary, but I'd rather reset the automatic permission. Having new
PMs automatically granted permissions on the cube seems much more
elegant and appears to have been done previously. Or did the
consultant add all users to the cube, or maybe all domain users or
something like that? And maybe those permissions were erased when the
OLAP Administrator account went sneakers up?

Thank you in advance for your time and help,
Crook
 
C

crook

Oh, I did check the installation guide, p. 130 - 131. Things look
okay. Just wanted to show that I tried to do my homework before
posting.
 
G

Gary L. Chefetz [MVP]

The typical approach is to add roles to the cube (at least one) and then add
an active directory global group to the roles. This way, when new users are
created in AD, and added to the global group, permission is automatically
added for users who are members of the global group. The state of the WSS
Admin account will cause everyone to fail Project Server authentication to
the cube, however would have no effect on the back-end data permissions.
 
C

crook

Gary,

Thank you very much for the reply. I've added an AD group that
contains nearly everyone in our domain. Hopefully, this will eliminate
any further trouble. The consultant must have had loaded that group,
or a similar group, when the system was set up.

Thank you again for your time,
Crook
 
Top