Accessing reports published on dashboard without having access to Cubes RRS feed

  • Question

  • Hi All,

    We have SSAS and PAS server on same machine.
    We are able to connect to PAS server,however we have created one dashboard and we have deployed some reports based on the SSAS cubes on the same dashboard.
    The problem is that we have some users who wants to view the reports that has been published on dashboard,for this we have given view access for thoes users on dashboard.However we dont want to give them access to the cubes.If we give them access to cubes they can view the reports but if we remove their access then they can't access the reports from dashbaord,it gives error like "cube cannot be found"

    Is there any way to avoid them to access the cube data and though they can access the reports published on dashbaord?

    Wednesday, September 16, 2009 6:28 AM

All replies

  • Hi varsha,

    If you want to give users access to dashboard views but not to the data they pull back from SSAS then the dashboard views would be blank ('cube cannot be found').  One thing you could maybe do is export the view to Excel or PowerPoint and send them a report instead of full access to the dashboard.  ProClarity's architecture will always require the authenticating user to have access to the cube data before it will display the view.  SSRS has reporting capabilities that are more 'static' that ProClairty so you might take a look at that platform as well.

    Microsoft ProClarity | This posting is provided "AS IS" with no warranties, and confers no rights.
    Wednesday, September 16, 2009 3:12 PM
  • Hi Sean,

    Thanks For your reply.

    Yes, if I dont give access to cubes , for users on dashboard it will show "cube canot be found" . however as per our requirement they want to view the reports from dashboard itself,without accesing the cube data,so we are stuck at this point.

    Is there any way that we can give access to these users at cube side as well but for accessing the cube data we will create some Generic ID and password so the users can't access the data?

    Is there any way so that generic ID and password can be given for cube access?
    Thursday, September 17, 2009 2:48 AM
  • Hi varsha,

    Sorry for the delay in getting back to you.  I think what you can do here is to set the website to automatically use a specific user account regardless of who is connecting.  In IIS6 you can do this by setting the PAS virtual directory to anonymous logon and then specify which user account to use.  In IIS7 you can do this by using pass-through authenticaton as a specific user.  Then, whichever user accesses the dashboard it will always use account set in the directory security tab to retrieve the cube data.  You can also disable all navigation options within the view(s) to make the page static.  If you have a business requirement to have one PAS site as integrated you can create a copy of the PAS virtual directoy and then set the copy to auto-authenticate, and then point the dashboard views to the copy instead of the original.

    Microsoft ProClarity | This posting is provided "AS IS" with no warranties, and confers no rights.
    Monday, October 12, 2009 8:59 PM
  • Hi Sean,

    Thanks you so much for your reply.

    Yes I have tried the option which you have mentioned,but the problems while using this scenario was anyone can access the PAS website internally using this account, we were not able to restrict the users access here.

    finally we have decided to setup dimensional security on the cubes itself.in this way as per their requirement we have set up that and we have given access to users in cubes.

    We have successfully completed this Project in this way.

    Friday, October 30, 2009 8:53 AM