Granting Process Database Permissions

After you install an instance of Microsoft SQL Server 2008 Analysis Services (SSAS), all
members of the Administrators local group are members of the Analysis Services Server
role in that instance and have server-wide permissions to perform any task within the
instance of Analysis Services. By default, no other users have any permission to
administer or view any objects in the instance of Analysis Services.
A member of the Analysis Services Server role can grant users administrative access on a
server-wide basis by making them members of the Server role, which grants them
unrestricted access to all Analysis Services objects and data in that instance. A member of
the Analysis Services Server role can grant users access on a more limited basis by
granting them limited or complete administrative or access permissions at the database
level. Limited administrative permissions include process or read definition permissions
at the database, cube, or dimension level.
In the tasks in this topic, we will define a Process Database Objects security role that
grants members of the role permission to process all database objects, but no permission
to view data within the database.
To define a Process Database Objects security role
1.In Solution Explorer, right-click Roles and then click New Role.
Role Designer appears, as shown in the following image.

2.Click the Process database check box.

3.In the Properties window, change the Name property for this new role to Process
Database Objects Role.
4.Switch to the Membership tab of Role Designer.
Notice that there are no users or groups in this role. You are just creating a role in this
procedure. After deployment, an administrator can add users or groups to the role.
5.Switch to the Cubes tab of Role Designer.
Notice that members of this role have permissions to process this database, but have no
permission to access the data in the Analysis Services, cube and have no local
cube/drillthrough access, as shown in the following image.

6.Switch to the Dimensions tab of Role Designer.

Notice that members of this role have permissions to process all dimension objects in this
database, and, by default, have read permissions to access each dimension object in the
Analysis Services Tutorial database, as shown in the following image.