Securing Your Cube Project - Getting Started with SQL Server 2012 Cube Development - page 217

11. Click on the Select all members option and deselect all members except for
North America . This will add the members to Denied member set .
12. Deploy the project.
The difference between the Select all members and Deselect all members options
in the Role editor is not merely that you either have to check or uncheck the boxes
for the dimension members. If you check how the members are added to security
settings, you can see the difference. Consider the North America Reader.role file
that had the following selection:
If you switch to the Advanced tab, you will find that the following code is added to
the Denied member set textarea: