Prologika Forums

I realize this is probably a security 101 problem, but I've got a fairly robust cube I'm now wanting to share with users and I can't get it to work. I have created a role called "Cube User", and this user has all the read privileges. I've assigned the role to a user on the network.

 When I browse the cube as Current User, I can see the cube, when I browse the cube as the role "Cube User", I can see the cube, when I try to browse the cube as the user assigned to the role, I get

I am using "Change User" in the Cube Browser tab to test, which is giving me the error. I have checked and did not have any Allowed or Disallowed parameters in the Dimension Data, and I tried as you suggested in commenting out the Calculations script except the first CALCULATE statement. I am still getting the same error message.

 My ultimate goal is to have another be able to access the cube via pivot table. I am guessing, somehow, that they are having trouble connecting to the database somehow. When I try "Run As" in SQL Server Management Studio, I am able to both access the server and browse the cube.

 I have all my services running as Network Services (built-in) now, since I doubted running as Local would work. Any other ideas?

 Thanks so much for your help! I have a somewhat useful first iteration of the cube to show, and I cannot enable others to see it! :(

 Thanks,

Cheryl

It seems to me that any authenticated user on the user is being rejected in connecting to the cube, but not if the user is running the server. For example, even when I "Change User" to myself (as an authenticated domain\username), it fails as well. Wasn't sure if I was clear in stating that before...

Thanks,

Cheryl

I am reviewing your book more carefully and can see that the Windows Server 2003 domain controller is required to use "Change User" functionality for "Other User". I wonder if I am barking up the wrong tree here as I do not know which domain controller is used.

The root problem is trying to debug why or why not Pivot Table access from another user workstation will/will not work. The actual error given when the user tries to set up a Data Source to the cube indicates trouble with the transport layer. I wanted to test that the user had access before trying to figure out why the user could not access from Excel... I do have PTS 9.0 installed (and trying to use it) there...

Windows Server 2003 is for when you need to impersonate the user which is not what you doing.

Try using the SQL Server Profiler to see what identity the session is being established under.Sounds like an issue with Active Directory though  If you create a local Windows account and assign it to the role, and then connect as this account, does it work? I haven't encountered "Incorrect function" error with SSAS security so it's probably outside SSAS.

Hi Teo,

 Thanks for your help! I think the problem with the "Change User" browser functionality had sent me off on the wrong track. It was, indeed, an authentication issue identified by using SQL Server Profiler (in the past I've never had to be a server admin, just a database architect - so getting this set up is presenting new opportunities to learn... :) )

Thanks again