Roles Report
The main purposes of this Roles Report are the following goals:
- To recursively list the members of the role and the members of groups so that you can easily determine which members actually have access via each role.
- To identify members of roles which will not have the desired effect. Specifically if a role references an Active Directory group which is a distribution group instead of a security group, members of that group will not gain the access granted with the role. This report highlights this situation.
- To identify members of roles which are invalid and which are causing the "no mapping between account names and security IDs was done" error during deployment.
- To summarize all the security permissions granted via the roles instead of having to click into dozens of screens to find this information.
- To serve as documentation which can be printed or archived or sent to non-developers.
Right-clicking on the Roles folder in an SSAS project lets you open a report summarizing everything about the setup of those roles:
The first pages of the report list the members of each role:
The other pages detail the permissions granted in each role such as the following summary of dimension data security:
For a more complete example, download a
sample report.
Note: This report can take several minutes to run. Be patient.
Note: Many thanks to Edward Melomed for letting BIDS Helper borrow some code from his
ASValidateUsers tool.