Hi,
I need to setup a security access (SSAS 2008) on measures and calculated members on my cube and I am not able to find a straight forward way to do this.
Seems to me that the calculated members are not inheriting any of the security access from the measures where the security has been
applied from Measures dimension in the Dimension Data tab of the Roles definition dialog.
I have already a role defined on my cube with some basic dimension data restrictions with “Enable Visual Tools” enabled, but now I need to
hide some measures also (some of them are calculated members)
For example:
Measure: M1, M2, M3, M4
Calculated Members: M5 and M6 (M5 is a calculated member from M1 and M2)
I need to hide measures M1, M2 and M5 from client cube access throughout client applications.
What I did so far:
In Measures dimension in the Dimension Data tab of the Roles definition dialog I’m able to see the natural measures (M1 and M2) and disable them,but not M5 (calculated member).
When disabling M1 and M2 only in roles, because of M5 calculated member, in the client application I have an error as: MdxScript(cube name)
(6,24) The dimension ‘[M1]’ was not found in the cube when the string, [M1] was parsed."
From Measures dimension in the Dimension Data tab of the Roles definition dialog, when scripting the measures I need to hide in Advanced tab / Denied
Member Set as:
{[Measures].[M1], [Measures].[M2], [Measures].[M5]}
…I’ve got the same above error in the client application.
With only{[Measures].[M5]} scripted in Dimension Data tab the measure is still visible agg data also.
I do not want to use perspectives or to start create natural measures in DSV in order to have an easy to go work around. My cube has 64 calculated members
from various natural measures.
Any help is very much appreciated.