SSAS 角色 - 创建角色以按国家/地区限制对多维数据集的访问
我正在尝试创建一个角色,以限制对分析服务上的多维数据集的访问,以便该角色的成员只能查看与特定国家/地区相关的记录(来自 dim_country 维度)。因此,例如,他们只会看到 dim_country 名称为“England”的记录,而看不到任何其他国家/地区的记录。
我遇到的问题是,无论我输入什么内容,所有记录都会被返回。在 BIDS 中进行测试(使用 Test Cube Security)以及在将 Roles= 添加到 Excel 中时,会出现此问题多维数据集连接定义。
我将不胜感激任何建议。
角色定义我做了以下更改,并将其复制到 AdventureWorks General -> 中。读取定义已检查 立方体->访问=读取 ->本地多维数据集/钻取访问选定的
维度数据 国家/地区的客户维度 允许的会员集 = [客户].[国家/地区].&[法国] 被拒绝的成员集 = [客户].[客户].[所有客户] 启用视觉总计 = 勾选。
正如我所说,问题是我得到的是返回的所有值,而不是那些按国家/地区过滤的值
I'm trying to create a role, to restrict access to a cube on Analysis services, so that a member of this role can only see records related to a specific country (from a dim_country dimension). So, for example, they'd only see the records where the dim_country name is 'England', and nothing at all for any other countries.
The issue I'm getting is that all records are being returned, regardless of what I'm putting in. This issue is the case when testing in BIDS (using Test Cube Security) and from Excel when I've added the Roles= into the cube connection definition.
I'd appreciate any suggestions.
The Role Definition I've made the following changes, and replicated it in AdventureWorks General -> Read Definition Checked
Cubes -> Access =Read
-> Local Cube / Drillthrough Access selected
Dimension Data
On the Customer Dimension, in Country
Allowed Member set = [Customer].[Country].&[France]
Denied Member Set = [Customer].[Customer].[All Customers]
Enabled Visual Totals = Ticked.
As I said, the issue is that I'm getting all values returned, rather than those filtered by the country
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
这是由 SSAS 上的角色的一个已知问题引起的。
维度数据上的角色安全继承似乎没有继承。
我通过进入“多维数据集维度数据”下拉列表并在其中添加“允许的成员”集解决了该问题。这解决了这个问题。
This was caused by a known issue with Roles on SSAS.
The Role security Inheritance on Dimension Data doesn't appear to inherit.
I fixed the issue by going into the Cube Dimension Data dropdown and adding the Allowed Member set in there also. This resolved the issue.