User Accounts and Groups
Before you create roles in Microsoft® SQL Server™ 2000 Analysis Services, you must create user accounts and groups in User Manager in Microsoft Windows NT® 4.0 (or Computer Management in Windows® 2000). To be created, a role must contain at least one user account or group. A user account or group cannot be added to a role until after it is created in Windows NT 4.0 or Windows 2000.
It is usually best to finalize and implement a design for the memberships of groups before you create roles in Analysis Services. This approach can reduce the amount of required role maintenance.
If you are using NTLM Security Support Provider as your authentication method, all user accounts and groups that are to be granted access to cubes on an Analysis server must be in the same domain as the user account under which the Analysis server was installed or in a trusted domain. User accounts and groups in other domains cannot connect to the Analysis server.