Securing Your Cube Project - Getting Started with SQL Server 2012 Cube Development - page 208

Adding custom roles to the database

Custom security roles can be used to secure the objects on various levels; the top
level is always the database level. On the database level, you can specify the follow-
ing options:

Database
permission

Effect

Full control
(Administrator)

An administrator of the database has full permissions on the data-
base and its content; this includes the rights to back up or restore
the database and add new roles and objects to it. The database
administrator also has the rights to query system views to see
what users are accessing.

Process data-
base

The Process database permission allows a user to process the
database and its objects; this permission does not give a user the
permission to connect to the database to query it.

Read defini-
tion

The Read definition permission allows a user to read the metadata
in the database. This is the permission that allows a user to con-
nect to the database through tools such as SQL Server Manage-
ment Studio.

The minimum database permission needed to connect to the cube is the Read defin-
ition permission, and you need to give this to all the users that will connect to the
cube. To add a database role to the cube project, perform the following steps:

1. In the Solution Explorer , find the Roles node.
2. Right-click on it and choose New Role .