Users not able to connect to SSAS MDX cube from different domain

Lang, Robert 41 Reputation points
2022-12-16T18:52:14.23+00:00

I have a SSAS 2016 MDX cube deployed to a server that is on domain ABC. Domain ABC has a trusted relationship with domains EDF, HIJ, and EMEA. The users that are not in the ABC domain are in a domain local AD group on the ABC domain to allow them to access our MDX cube.

All users in all domains, except for the EDF domain are able to connect to our Cube database. On Tuesday, users in the EDF domain were not able to connect to our MDX cube. The message that I see captured in SQL Profiler is "The user name or password is incorrect". On Wednesday and Thursday, the users in EDF domain were able to connect to the MDX cube. This morning, the same users are not able to connect the MDX cube again.

I am also running a tabular cube on a different server. The same users that can not connect to the MDX cube are able to connect to the Tabular cube. They are also able to connect to other assets in our environment with their AD account. It is only with the MDX cube that has the issue.

Does anyone have any ideas as to why the MDX cube will not allow connections and where I can look to try to capture additional details to explain what is happening?

Appreciate the help

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,915 questions
SQL Server Analysis Services
SQL Server Analysis Services
A Microsoft online analytical data engine used in decision support and business analytics, providing the analytical data for business reports and client applications such as Power BI, Excel, Reporting Services reports, and other data visualization tools.
1,328 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Seeya Xi-MSFT 16,571 Reputation points
    2022-12-19T09:45:31.243+00:00

    Hi @Lang, Robert ,

    Firstly, you would have to have a two-way trust setup between the domains. Second you could create one account that you use to connect to both of the cubes. So their connection is using that one domain account, not their own.
    In addition, here is a related thread: https://social.msdn.microsoft.com/Forums/sqlserver/en-US/4efa0d68-9690-4f82-a933-722d97bab81c/access-ssas-cube-from-across-domains-without-direct-database-connection?forum=sqlanalysisservices

    Best regards,
    Seeya


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.