.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Register
 
Win Surprise Gifts!!!
Congratulations!!!


Top 5 Contributors of the Month
Easy Web
Imran Ghani
Post New Web Links

SSAS 2008 - Security Architecture Design?

Posted By:      Posted Date: October 10, 2010    Points: 0   Category :Sql Server
 

Hi, I would like to know BEST way to design SSAS 2008 security architecture for my organization.

I have different data sources in SQL Server 2008 and those ETL store data into datawarehouse (dimension, fact) and then I create cube on that dw. What I want to do is BEST way to desgin SECURITY architecture to browse cube as per ORGANIZATION CHART.

Like we have different companies >>> divided into Division >>> SubDivisions >>> Business Stream >>> Region (i.e. west, east) >>> .....

For example if person has WEST REGION access than he can only see WEST region not the other region but he need access to correct COMPANY >> DIVISON >> SUBDIVISION >> BUSINESS STREAM >> REGION - WEST only.

Please someone can provide BEST possible solution/ideas to design this sort of SECURITY architecture. Thank You.




View Complete Post


More Related Resource Links

Explanation on Aggregation Design Tab in BIDS for SSAS 2008?

  
Is there info on how the new aggregation design TAB in BIDS for SSAS 2008 works? It looks great but I have no idea what it does and how to use it. Is that just me?

Connection issue SSAS 2008 (role security)

  

Hello Experts,

After implement role security based on dimension security we get connection issues at the initial log on to our ssas cube.

Our environment is:
Windows Server 2008 SP2, x64
MS SQL Server 2008 Enterprise SP1
VM-Ware Maschine
Processor: AMD Opteron 8381 HE (QuadCode 2,5GHz)
Memory: 8 GB
Relation database: about 18 GB
Multidimensional database: about 8 GB / 39 Dimension / 68 measure groups (some were needed to implement m:n relations)

Security model: 4 fact tables get 4 additional column e.g. Security1 with values “yes” and “no”. A Role1 e.g. is able to see Security1 only “yes” facts. A Role2 e.g. is able to see Security2 only “yes”

SSAS 2008 R2 security issue

  

I have a development server running Windows Server 2008 R2 with a Analysis Services 2008 R2 service running on it. But before going forward with releasing to production, I have one final issue and it's security.

I have two Analysis db roles created: one which has full access (Role1) and another to read the (only) cube and read dimensions and so forth (Role2). When a user is in Role1, the user can see the Analysis database and cubes, etc, but if I remove the user from Role1 and leaving them only in Role2 without full control, the user can no longer even see the Analysis database.

The user can connect to the SSAS instance whether member of either roles which makes me think there are no networking issues. Running a trace I see the user correctly being identified and when the user is in Role1, everything is fine so I don't think it's a possible authentication issue. It's worth mentioning that I have Kerberos configured and working properly as I can tell. But for trying to fix this problem, I'm logged into the server and running SSMS.

QQ, Halp?


About SSAS security on Windows server 2008

  

Hi Experts:

I set up a role on SSAS cube, and only users in this role can see/process the cube.

And I tried to test it by removing my NT account from not only membership of role on this cube but also administrator group of Win Server 2008R2. The problem is, when I use Excel 2007 to connect the cube on my local PC, I can still see/process this cube...

My NT account is not longer in role's memebership list or Server's administrator group, but why I can still access it...

Any thoughts?  Your help would be greatly appreciated, thanks!


Solidify Your C# Application Architecture with Design Patterns

  
design pattern can solve many problems by providing a framework for building an application. Design patterns, which make the design process cleaner and more efficient, are especially well-suited for use in C# development because it is an object-oriented language. Existing design patterns make good templates for your objects, allowing you to build software faster. This article describes several popular design patterns you can use in your own applications, including the singleton, the decorator, the composite, and the state classes, which can improve the extensibility of your applications and the reuse of your objects.

Need help for Architecture design

  

I need help to make decision for making framework for new project.
Project is financing (banking) project. It'll b using .net 3.5 sp1 with sql server 2005.
I want to know what should be best approach for framework? Mean to use LINQ or go with Stored procedure way with 3 tier architecture?
or anything else?

For current financing project the framework is done by one of MVP. He used LINQ to all things.
But we facing problem of w3wp process hang. We cant go for web gardening or farming bcz LINQ objects cnt be serialized to store in Session etc.
Difficult to use Transactions in LINQ. Have to use TransactionScope lead to MSDTC problems etc.

Please give your opinion.


Threat Modeling: Uncover Security Design Flaws Using The STRIDE Approach

  

Whenever you build a new system you should consider how an in¬truder might go about attacking it and then build in appropriate defenses at design time.

Shawn Hernan, Scott Lambert, Tomasz Ostwald, Adam Shostack

MSDN Magazine November 2006


Secure By Design: Your Field Guide To Designing Security Into Networking Protocols

  

If you were to build a new communications protocol from scratch, how would you address security? Here the authors take a look at that question and generate some valuable insights into secure protocols.

Mark Novak and Andrew Roths

MSDN Magazine September 2006


Design Patterns: Solidify Your C# Application Architecture with Design Patterns

  

A design pattern can solve many problems by providing a framework for building an application. Design patterns, which make the design process cleaner and more efficient, are especially well-suited for use in C# development because it is an object-oriented language. Existing design patterns make good templates for your objects, allowing you to build software faster. This article describes several popular design patterns you can use in your own applications, including the singleton, the decorator, the composite, and the state classes, which can improve the extensibility of your applications and the reuse of your objects.

Samir Bajaj

MSDN Magazine July 2001


DR Setup for SSAS 2008

  
Hello Guru's, I'm new to SSAS env. and want to set up its DR env. Can anybody guide me with any good strategis and implementation practices. We are using SSAS 2008 on 2 node Cluster Server. Thank you in Advance.- Nilesh

Query Performance & Overall Design - SSAS MDX WCF

  
Hi All, We have a Cube which is to be queried by the Online system , using WCF service. Peroformance of the queries running on the Cube is not really very good , as we have to calculate various percentile (which are all calculated members) on the cube, this howver works well within limits of 5-6 secs for small sample size. But this goes beyond the threshold of 30 secs when the record counts increases. What we have is our SSAS Cubes , and we have WCF Service querying the Cube using ADOMD.NET. This may not be one of the best way to achieve this requirement , but we are kind of completed with development and it may not be feasible to work on another approach, what we are looking for is optimize this design and make it work with in expected time limits of 5-8 secs. Kindly let me know, if i am not clear or if you need any more info to suggest something ! Thanks a lot for your help !   Kindly

OLE DB Error: Network-Related or Instance-Specific while Deploying SSAS 2008 Cube

  
Hi, I encountered the below listed error while attempting to deploy SSAS 2008 DB: Error 1 OLE DB error: OLE DB or ODBC error: Login timeout expired; HYT00; A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.; 08001; Named Pipes Provider: Could not open a connection to SQL Server [5]. ; 08001.  0 0  I am running a standalone MSSQL 2008 named instance on Windows Server 2008 R2. Here are the steps I have taken but yet the issue is not resolve: 1) Enable Remote connections on the server 2) Enable TCP\IP 3) SQL Browser is Running 4) Set Firewall Inbound Exceptions for SQL Browser, Default Port 1433, UDP Port 1434 5) Using Management Studio I can successfully connect to the MSSQL named instance from the app server 6) I can ping I MSSQL box from the app server 7) Read and implemented all steps in the MSDN post below: http://blogs.msdn.com/b/sql_protocols/archive/2007/05/13/sql-network-interfaces-error-26-error-locating-server-instance-specified.aspx Thanks for your help.

Getting filtered data from Role based SSAS security

  
Hi everyone,I've got a heap of reports that are based on various SSAS cubes. I have roles defined on these cubes that restrict data via certain dimensions. Question is, will these restrictions filter through to the report...ie, if I have a sales person restricted in the SSAS cube to only see sales against their territory (restricted in the Territory dimension), when they run the report will it filter the result based on their SSAS credentials and only show the data they have access to (even though the SSRS report has no direct filters or parameters applied)?Cheers for any help!!

VWD 2008 express does not show design view

  
Hi, hope somebody can help me. I was doing a tutorial with VWD and SQL (security Tutorial).I was having a problem making the application to use my own database instead of the default aspnet.db.Don't know what happened, but after reinstalling VWD a few times I had all sorts of problems, VWD would not uninstall etc.so  I used an uninstalling software and must have deleted some files.I know I got a message saying missing ENU\vs_setup.cab. Anyway the problem now is that after I succeded in reinstalling everything I needed, VWD,SQL and Management Studio VWD does not show the design view bur only souce view, Can you help me with htis problwm?Thank you very much.Carlo

Shared dataset in SSRS 2008 R2 running on SSAS 2005

  
I am trying to create a report in SSRS 2008 R2 using SSAS 2005 as a datasource. My dataset has a date parameter. When I create an embedded dataset in my report everything works fine, but when I create a shared dataset with the exact same mdx query, I get the following error: An error occurred during local report processing. The definition of the report 'xxxx' is invalid. The Value expression for the report parameter 'DateCalendarHierarchy' contains an error: [BC30034] Bracketed identifier is missing closing ']'. Does anybody have any ideas? Is this a bug? Thanks, Louis

AdomdDataAdapter.Fill returns memory error when querying an SSAS Cube(2008)

  
For certain SQL's I will get the following error when calling the Fill method on an AdomdDataAdapter object. "Memory error: While attempting to store a string, a string was found that was larger than the page size selected. The operation cannot be completed."   Snippet of Code: DataSet ds1 = new DataSet(); AdomdCommand acmd1 = cn1.CreateCommand(); acmd1.CommandText = "SELECT ..."; AdomdDataAdapter ad1 = new AdomdDataAdapter(acmd1); ad1.Fill(ds1);   Now when we run this query in Ms Sql Studio we don't get any errors but the query returns 1 row with over 40,000 columns. I'm guessing the # of columns might be an issue but not sure.   When doing a Google search it appears that this problem was found in the 2005 and fixed in that version. Have any of you come across this problem?  
Categories: 
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend