Example 4—Limiting Access to a Member and its Descendants

  • Article

In this example, the database role has access to cells for the Europe member and its descendants (France, Germany, and their City level members) in the Geography dimension, but the role does not have access to cells for any other members in that dimension.

The following expression is the Multidimensional Expressions (MDX) expression that sets these permissions:

Ancestor(Geography.CurrentMember,[Continent]) IS Europe

Reviewing the Result Set

Based on these cell data permissions for this database role, a query on all cells returns the result set shown in the following table.

Continent

Region

Cost

Cost

Revenue

Revenue

Tax

Tax

1997

1998

1997

1998

1997

1998

Asia

.

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

.

Japan

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

.

Korea

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

Europe

.

1309

1514

1675

1835

304

348

.

France

864

931

1002

1122

205

228

.

Germany

445

583

673

713

99

120

N. America

.

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

.

Canada

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

.

USA

#N/A

#N/A

#N/A

#N/A

#N/A

#N/A

Important

If a Microsoft Windows user or group belongs to multiple database roles, a query on all cells would first result in a dataset being generated based on each database role to which the user or group belongs. Then, Microsoft SQL Server Analysis Services would combine all these datasets into one dataset, and return that combined dataset to the user or group.

See Also

Concepts

Grant custom access to cell data (Analysis Services)

Example 1—Permitting Access to All Members

Example 2—Permitting Access to a Single Member

Example 3—Denying Access to a Single Member

Example 5—Giving Access to a Specific Measure Within a Dimension

Example 6—Excluding Selected Measures from a Dimension

Example 7—Making Exceptions to Denied Members