Databases Reference
In-Depth Information
Enabling or Disabling Features
Managing database roles is one aspect of securing data in Analysis Services.
You can add users to the server role so that you can have several adminis-
trators for your Analysis Services instance. The administrator can define ap-
propriate levels of access to databases and objects within a database.
However, there is another level of protection that Analysis Services 2005
provides by which you can disable feature(s) that are not used by your users.
One of the most common ways to protect your server from security attacks is
to reduce your attack surface by running your server or application with min-
imum functionality. For example, you can turn off unused services of an oper-
ating system that listens for requests from users by default. As and when the
features are needed, they can be enabled by the administrator. Similarly, Ana-
lysis Services allows you to enable or disable certain features to prevent se-
curity attacks, thereby making your Analysis Services more secure. Following
is the list of features that can be enabled or disabled using the server proper-
ties of your Analysis Services instance:
▪ Feature\ManagedCodeEnabled
▪ Feature\LinkInsideInstanceEnabled
▪ Feature\LinkToOtherInstanceEnabled
▪ Feature\LinkFromOtherInstanceEnabled
▪ Feature\COMUDFEnabled
▪ Datamining\AllowAdhocOpenRowSetQueries
▪ Security\RequireClientAuthentication
The features LinkInsideInstanceEnabled, LinkToOtherInstanceEnabled, and
LinkFromOtherInstanceEnabled help in enabling or disabling linked objects
(measure groups and dimensions) within the same instance and between in-
stances of Analysis Services. The features ManagedCodeEnabled and
COMUDFEnabled help you to allow/disallow loading assemblies to Analysis
Services. You can allow or deny ad-hoc open row set data mining queries us-
ing the property Datamining\AllowAdhocOpenRowSetQueries. The server
property Security\RequireClientAuthentication helps you to allow or deny an-
onymous connections to Analysis Services.
Search WWH ::
Custom Search