Database Role Manager
Use this dialog box to create and maintain database roles or to set values for database roles assigned to data mining models.
Each row in the list displays a database role. The list is sorted alphabetically by the role names in the Role column.
Each database role defines a set of users and groups and the access they share. A database role can be assigned to any cube (including virtual and linked cubes) and data mining models in the database. This action grants users in the role access to the cube or mining model. It also creates a cube role or mining model role with the same name as the database role.
Note Some values in a database role can be overridden in cube roles of the same name. However, database role values cannot be overridden for mining model roles of the same name, because you cannot edit role properties in Mining Model Role Manager.
A cube role applies to only a single cube. The default values for a cube role are derived from the database role of the same name. Some of these defaults can be overridden in the cube role. In this case, the specifications in the database role are not the specifications used when users in the role access the cube. To determine the specifications that are used, see the cube role. Cube roles are maintained in Cube Role Manager.
Database Role Manager appears when, in the Analysis Manager tree pane, you right-click a database and then click Manage Roles.
Options
Role
View the database role names.
Enforce on
View the location of security enforcement: Server or Client. Server enforcement is more secure but may slow performance. Client enforcement generally provides better performance, but it may allow users to gain unauthorized access to data on the client workstation.
If Client is selected, queries might be resolved partially or completely at the client workstation.
If Server is selected, queries are resolved entirely on the Analysis server or at the data source. User-defined functions stored exclusively on client workstations cannot be used.
To change the value, click it, click the edit (...) button, and then in the Database Role dialog box, in the Enforce on box, select the new value.
Membership
View the Microsoft® Windows NT® 4.0 or Microsoft Windows® 2000 users and groups in each database role.
To change the membership of a database role, click the cell where the role intersects Membership, click the edit (...) button, and then use the Membership tab of the Database Role dialog box.
Note Changes in this tab are propagated to all cube roles with the same name as the database role.
Cubes & Mining Models
View the cubes and mining models to which each database role has access.
To change the cubes or mining models a database role can access, in the cell where the role intersects Cubes & Mining Models, click the edit (...) button to display the Database Role dialog box. Next, use the Cubes or the Mining Models tab.
Restricted Dimensions
View the database's dimensions with a read permission or read/write permission of Fully Restricted or Custom.
To access the dimension security settings for a database role, click the cell where the role intersects Restricted Dimensions, click the edit (...) button, and then use the Dimensions tab of the Database Role dialog box.
Description
View the description of each database role.
To change a description, click it, click the edit (...) button, and then in the Database Role dialog box, in the Description box, type a new description.
Show
Click to limit the database roles displayed in the list. You can limit by a user name or group name in the roles or by a cube to which the roles are assigned.
To limit by a user name or group name in the roles, next to Show, in the first box, select Roles containing users. In the next box, type the user name or group name, or type the first part of a name. Click the magnifying glass button.
To limit by a cube to which the roles are assigned, next to Show, in the first box, select Roles assigned to cubes. In the next box, type the cube name. Click the magnifying glass button.
New
Click to display the Database Role dialog box, where you can create a new database role.
Edit
Click to display the selected database role in the Database Role dialog box, where you can edit the database role.
Duplicate
Click to display the Duplicate Role dialog box, where you can supply a name for a new database role based on the selected database role, and the Database Role dialog box, where you can define the new database role.
Delete
Click to delete the selected database role.