If you found this blog useful and you’d like to say thanks you can click here to make a contribution. Thanks for looking at our blogs!

BLOGS BY TOPIC

BLOGS BY AUTHOR

BLOGS BY YEAR

Administrator access to a tabular Analysis Services instance

This blog gives an outline of how to add administrators to an instance of SSAS, and how to set whether some accounts are automatically made administrators by default.

This blog is part of our online SSAS Tabular tutorial; we also offer lots of other Analysis Services training resources.

Posted by Andy Brown on 22 February 2016

You need a minimum screen resolution of about 700 pixels width to see our blogs. This is because they contain diagrams and tables which would not be viewable easily on a mobile phone or small laptop. Please use a larger tablet, notebook or desktop computer, or change your screen resolution settings.

Controlling administrator access to your model

In Analysis Services (tabular model) there are two types of role that you can create:

Type of role	Relates to	Notes
Administrator	The Analysis Services instance	An Analysis Services instance has to have at least one administrator.
Database	An individual tabular database	You can create roles in either Management Studio or SSDT, controlling who can see which rows in which tables.

This blog gives an overview of how to set the administrator of your Analysis Services instance.

Changing the default administrators

When you install SSAS Tabular, two accounts are automatically made administrators:

Account	Property controlling this
Members of the local administrator group on the server on which SSAS is running	BuiltInAdminsAreServerAdmins
The Windows account on which the Analysis Services service is running	ServiceAccountIsServerAdmin

You can prevent this behaviour by turning off either or both of the properties shown in the table above as follows. First display your instance's properties:

In Management Studio, right-click on an instance of SSAS and choose Properties.

Select the General tab:

Choose to look at General properties.

Now choose to show advanced properties:

Tick the box shown to reveal advanced properties.

You can now scroll down to change the two properties listed:

Change either or both of these properties to control who has administrator access to your Analysis Services instance.

Adding administrators

You can only change the SSAS administrator in Management Studio (you have to specify at least one administrator when you install Analysis Services):

Connect to your Analysis Services database, then right-click on it in Management Studio and choose to change its properties.

You can now add an administrator as follows:

In the Security tab, click on the Add... button to add an administrator to your database.

I don't claim to be a SQL Server security expert, but hopefully this will have helped some overworked SQL Server administrator somewhere!

This blog has 0 threads Add post