Search code examples
excelssasbusiness-intelligenceolapcube

How to avoid changing the Excel connection string for SSAS Role


I have implemented the Dynamic Security in our BI-SSAS Projekt using a User-Dimension that is updated from Active Directory. I created SSAS-Roles and inside I restrict the users to see only the specified branches. As Front-End they are using Excel. The problem is that Excel does not use as default the SSAS-Role created so I need to modify the conection string and add the following Property:Extended Properties="Role=PowerUsers" . How can we use the role created without having to edit the conection string from excel ? Could be this Excel connection string property added as default?

enter image description here


Solution

  • Why doesn't Excel use the right role if you remove Roles= from the connection string? Is the user in question an SSAS admin? Are you 100% sure? If you connect Profiler to SSAS and watch while that user connects it should list the roles the user belongs to. If the roles say *,PowerUsers,Readers then the asterisk means the user is an admin. If you remove him as an admin you won't need to specify Roles on the connection string.

    You might also install BIDS Helper and run the Roles Report on your cube. It will expand the security groups in case that user is in a group you weren't aware of.