Manage server administrators
Server administrators must be a valid user, service principal, or security group in the Microsoft Entra ID for the tenant in which the server resides. You can use Analysis Services Admins for your server in Azure portal, Server Properties in SSMS, PowerShell, or REST API to manage server administrators.
When adding a security group, use obj:groupid@tenantid. Service principals are not supported in security groups added to the server administrator role.
To learn more about adding a service principal to the server admin role, see Add a service principal to the server administrator role.
If server firewall is enabled, server administrator client computer IP addresses must be included in a firewall rule. To learn more, see Configure server firewall.
To add server administrators by using Azure portal
In the portal, for your server, click Analysis Services Admins.
In <servername> - Analysis Services Admins, click Add.
In Add Server Administrators, select user accounts from your Microsoft Entra ID or invite external users by email address.
To add server administrators by using SSMS
Right-click the server > Properties.
In Analysis Server Properties, click Security.
Click Add, and then enter the email address for a user or group in your Microsoft Entra ID.
PowerShell
Note
We recommend that you use the Azure Az PowerShell module to interact with Azure. To get started, see Install Azure PowerShell. To learn how to migrate to the Az PowerShell module, see Migrate Azure PowerShell from AzureRM to Az.
Use New-AzAnalysisServicesServer cmdlet to specify the Administrator parameter when creating a new server.
Use Set-AzAnalysisServicesServer cmdlet to modify the Administrator parameter for an existing server.
REST API
Use Create to specify the asAdministrator property when creating a new server.
Use Update to specify the asAdministrator property when modifying an existing server.
Next steps
Authentication and user permissions
Manage database roles and users
Azure role-based access control (Azure RBAC)