User Security Matrix - Roles

Question

Hi All,

I have a cube that contains Dimension "Employee" that contains informations on the employees (first name, last name ...), other Dimension "Region" that contains the geographical informations (region=>country=>city=>site),other dimensions and a single fact table "Calls".

I have a role that enables the users to see all the data but the data of Dim "Employee"

and other role that enables the users to see the data of determined country (Moroccofor exemple)

when i try to open the cube on excel with every role above, it works.

but when i try to open it with both roles (i select them both), the excel doesn't open.

I want to know what's the problem exactly ? what happens to the users in the both roles : will they see any data or not at all ? and what should i do to resolve this problem ?

Thank you i advance

Answer 1

So it looks like you've probably restricted access to the Employee table using OLS - it is a documented restriction of OLS that you cannot mix roles with OLS and RLS (see https://learn.microsoft.com/en-us/analysis-services/tabular-models/object-level-security?view=asallproducts-allversions#restrictions ) so you will need to combine your restrictions into a single role. So you may need to create additional roles to cover all the possible combinations of security restrictions.

Answer 2

Hi,

As above post has pointed out, that currently the combination of RLS and OLS is not supported.

You could upvote the request in SQL Server feedback at this post: Combination of OLS and RLS in SSAS Tabular

---

If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Users always get connection timeout problem when using multi subnet AG via listener. Especially after failover to another subnet ----Hot issues October