Adding and managing users
TANDBERG Analytics Extension Admin guide
10
Adding and managing users
There are two classes of users for the Analytics Extension:
administrators who have access to diagnostic information and settings
analytics users who are consumers of the Analytics Extension data output
SQL Server Analysis Services (SSAS) uses a strict security model and only Windows authentication is
supported. Any user or client who wishes to be an administrator or analytics user must have a valid
Windows Domain account the SSAS instance trusts. Some software clients allow a user to specify
which account they will use to authenticate to SSAS; others only support Integrated Authentication
where the credentials of your current user identity are used.
Analytics users
Users who wish to read data from the Analytics Extension must have access to the data warehouse
CUBE hosted by the SQL Server Analysis Service (SSAS). An account with SSAS access does not
necessarily have the right to read the data warehouse CUBE.
SSAS offers administrators a wide variety of permissions possibilities for users, but to ease
configuration the data warehouse CUBE has a custom
reader role
defined during installation. Users
who are members of this role will have access to read, but not modify any information in the data
warehouse CUBE. Access to the information made available via the Analytics Extension should be
granted by adding users to this
reader role
.
To add a new user to the
reader role
:
1. Open Management Studio, and connect to the relevant SSAS instance.
2. Locate
Databases > tmsng_dwhAsDb > Roles.
3. Right-click
Reader
and select
Properties
.
4. Go to the
Membership
subpage. Click
Add…
to enter users or groups (Figure 1). To grant read
access to domain members, use the
Everyone
group. Use the
Authenticated Users
group to
exclude guest accounts and anonymous users.
Figure 1: Managing user rights for accessing the cube
