Analysis Services Security - SQL Server Analysis Services 2012 Cube Development - page 239

Managing instance-level administrative
security
Each Analysis Services instance has one server role reserved for administrators. All
members of this role have unrestricted access to all objects on the instance. Member-
ship in the administrator role is mandatory to perform the following operations:
• Create and drop databases
• Collect traces against multiple databases on the same instance in a single
trace
• Stop/restart the instance
• Backup/restore databases
• Modify server configuration settings
• Grant server-level administrator permissions
• Detach/attach databases
• Synchronize databases (requires administrative permissions to both source
and target instances)
How to do it...
To add members to the server administrator role, perform the following steps:
1. Connect to the SSAS instance to which you have administrative access using
SSMS, right-click on the instance, and choose Properties .
2. Navigate to the Security tab of the resulting Analysis Services Properties
dialog box. Click on Add , enter the domain and login name (for example,
MyCorp\User ), and click on OK .
3. By default, you can add individual users and security principles to the server
role. If you need to add Windows groups, you must click on the object types
button and check the groups box that is unchecked by default.
4. If you examine the script that SSAS runs behind the scenes using SQL Server
Profiler , you'll find the two XMLA Alter commands, as shown in the follow-
ing code snippet:
<Batch Transaction='true'>
<Alter