Database Roles
A database role applies to a single database, and it includes a list of Windows NT® 4.0 or Windows® 2000 user accounts and groups. The specifications in a database role apply to end users' access to objects on an Analysis server while they are connected to it from a client application. Database roles are not used to grant or deny administrative access to objects.
Usually, database roles are created and then assigned to cubes or data mining models. Each assignment grants access to the cube or mining model and creates a cube or mining model role with the same name as the database role. The database role provides defaults for the cube or mining model role. The cube role can then be tailored to accommodate different permissions for various elements of the cube; however, customization of mining model roles is limited to changing role membership for access to the model.
In a database role, you can control access to the dimensions in the database. You can specify which levels and members of a dimension the role can view. If a dimension is
Database roles are immediately subordinate to the database. The database roles in a database apply to only that database and the objects within that database.
In the object hierarchy, commands are immediately subordinate to database roles. These commands are role commands. A role command is executed only for a specific database role. For example, a calculated member is created as a role command so that it is displayed only to end users in a particular database role. You must create and maintain role commands programmatically by using clsRoleCommand.
In Analysis Manager, database roles are identified by the following icon.
In Analysis Manager, database roles are created and maintained in Database Role Manager and the Database Role dialog box. Database roles are assigned to cubes in the Cubes tab of the Database Role dialog box or in Cube Role Manager.
If you are programming with Decision Support Objects (DSO), the class type associated with the database role is clsDatabaseRole.