What is user starting S-1-5-21-1687699058... ?

I see a user added that has name S- 1 -5-21 -1687699058-...

What is this user? can I safely delete it? (is there any documentation regarding this?)

When you add a user to a role in SSAS the role actually stores the users Security ID (which is this S- number) not domain\user. This is so that if you rename an account for some reason it will not break their access to the SSAS database.

When you open the roles dialog in SSAS it matches the SID back to users in AD and displays them in domain\user format. If you see any of these SID values it typically means that there are users in the role that have been deleted from AD (probably because they have left the company). So it is safe to delete these references. In fact you may not actually be able to save changes to the role until you delete these orphaned SID references.

Hi @maca128-1653,

Something here might be helpful:

SIDs added by Windows Server 2012 and later versions
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/security-identifiers-in-windows#sids-added-by-windows-server-2012-and-later-versions

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Best regards,
Leon

Normally, we should have user name in domain stored in the role member. I think it is safe to delete the unknow member. If particular user has lost his permission to the cube, we could add them back. Delete this would not harm much.