Create and Manage Roles (SSAS Tabular)
Topic Status: Some information in this topic is preview and subject to change in future releases. Preview information describes new features or changes to existing features in Microsoft SQL Server 2016 Community Technology Preview 2 (CTP2).
Roles, in tabular models, define member permissions for a model. Roles are defined for a model project by using the Role Manager dialog box in SQL Server Data Tools (SSDT). When a model is deployed, database administrators can manage roles by using SQL Server Management Studio.
The tasks in this topic describe how to create and manage roles during model authoring by using the Role Manager dialog box in SQL Server Data Tools (SSDT). For information about managing roles in a deployed model database, see Tabular Model Roles (SSAS Tabular).
To create, edit, copy, and delete roles, you will use the Role Manager dialog box. To view the Role Manager dialog box, in SQL Server Data Tools, click the Model menu, and then click Role Manager.
To create a new role
In SQL Server Data Tools, click the Model menu, and then click Role Manager.
In the Role Manager dialog box, click New.
A new highlighted role is added to the Roles list.
In the Roles list, in the Name field, type a name for the role.
By default, the name of the default role will be incrementally numbered for each new role. It is recommended you type a name that clearly identifies the member type, for example, Finance Managers or Human Resources Specialists.
In the Permissions field, click the down arrow and then select one of the following permission types:
Members cannot make any modifications to the model schema and cannot query data.
Members are allowed to query data (based on row filters) but cannot make any changes to the model schema.
Read and Process
Members are allowed to query data (based on row-level filters) and run Process and Process All operations, but cannot make any changes to the model schema.
Members can run Process and Process All operations. Cannot modify the model schema and cannot query data.
Members can make modifications to the model schema and can query all data.
To enter a description for the role, click the Description field, and then type a description.
If the role you are creating has Read or Read and Process permission, you can add row filters using a DAX formula. To add row filters, click the Row Filters tab, then select a table, then click the DAX Filter field, and then type a DAX formula.
To add members to the role, click the Members tab, and then click Add.
Role members can also be added to a deployed model by using SQL Server Management Studio. For more information, see Manage Roles by using SSMS (SSAS Tabular).
In the Select Users or Groups dialog box, enter Windows user or Windows group objects as members.