Granting Access to Mining Structures and Mining Models
By default, a database role in Microsoft SQL Server Analysis Services has no permissions to view any mining structures or mining models in the database. However, an Analysis Services database role can be granted access permissions to a mining model or mining structure.
Setting Permissions to Access a Mining Structure
A database role can have either read or read/write permissions to one or more mining structures in the database. If the database role has read or read/write permissions on a mining structure, those permissions apply to all the mining models that are based on that structure, unless different permissions have been specified for one or more of the mining models.
To grant read or read/write permissions to a database role, a user must be a member of the Analysis Services server role or a member of an Analysis Services database role that has Full Control (Administrator) permissions.
To give a database role access to a mining structure
In SQL Server Management Studio, connect to the instance of Analysis Services, expand Roles for the appropriate database in Object Explorer, and then click a database role (or create a new database role).
Click Mining Structure in the Select a Page pane, locate the mining structure in the Mining Structures list, and then select Read or Read/Write in the Access list for the mining structure.
Setting Permissions to Access a Mining Model
A database role can have either read or read/write permissions, as well as drillthrough and browse permissions, on one or more mining models in the database. Drillthrough and browse permissions allow the database role to view and browse the underlying data.
Note If you enable drillthrough on both the mining structure and the mining model, any user who is a member of a role that has drillthrough permissions on the mining model and the mining structure can also view columns in the mining structure, even if those columns are not included in the mining model. Therefore, to protect sensitive information, you should set up the data source view to mask personal information, and allow drillthrough access on the mining structure only when necessary.
To grant read or read/write permissions to a database role, a user must be a member of the Analysis Services server role or a member of an Analysis Services database role that has Full Control (Administrator) permissions.
To give a database role access to a mining structure
In SQL Server Management Studio, connect to the instance of Analysis Services, expand Roles for the appropriate database in Object Explorer, and then click a database role (or create a new database role).
Click Mining Structure in the Select a Page pane, locate the mining model in the Mining Models list, and then select Read, Read/Write, Drill Through, or Browse for that mining model.
To use a data source in a drillthrough query that uses the Data Mining Extensions (DMX) OPENQUERY clause, the database role also needs read/write permission on the appropriate data source object. For more information, see Granting Access to Data Sources and OPENQUERY (DMX).
Note
By default, the submission of DMX queries by using OPENROWSET is disabled. For more information, see Securing the Data Sources Used by Analysis Services.