70-467 · Question #92
You need to configure permissions for the Customers dimension. What should you do? (Each correct answer presents a complete solution. Choose all that apply.)
The correct answer is B. In SQL Server Data Tools, configure the BusinessUsers role to disallow the reading of the D. In SQL Server Management Studio, configure the BusinessUsers role to disallow the reading. SSAS dimension security restricting read access for a role can be configured either in SQL Server Data Tools at design time or in SQL Server Management Studio against a deployed database.
Question
You need to configure permissions for the Customers dimension. What should you do? (Each correct answer presents a complete solution. Choose all that apply.)
Options
- AIn SQL Server Management Studio, configure the BusinessUsers role to disallow the reading
- BIn SQL Server Data Tools, configure the BusinessUsers role to disallow the reading of the
- CIn SQL Server Management Studio, deny the member set for the Customers dimension data
- DIn SQL Server Management Studio, configure the BusinessUsers role to disallow the reading
How the community answered
(42 responses)- A10% (4)
- B86% (36)
- C5% (2)
Why each option
SSAS dimension security restricting read access for a role can be configured either in SQL Server Data Tools at design time or in SQL Server Management Studio against a deployed database.
This option in SSMS does not correctly configure the BusinessUsers role to restrict dimension data access because it applies the wrong security setting or targets the wrong object for the required disallow-read configuration.
SQL Server Data Tools allows developers to configure role-based dimension data security directly in the Analysis Services project, setting AllowedSet or DeniedSet properties on the dimension within the role definition before or after deployment.
Denying the member set directly in SSMS is not the correct mechanism for restricting dimension data access; the proper approach is to configure the role's dimension data permissions using the AllowedSet or DeniedSet within the role definition, not a direct member set deny.
SQL Server Management Studio connects to a deployed Analysis Services instance and allows administrators to configure the same role-level dimension security settings by editing the role properties on the live database, providing an alternative to SSDT for post-deployment configuration.
Concept tested: SSAS role-based dimension data security configuration
Source: https://learn.microsoft.com/en-us/analysis-services/multidimensional-models/grant-custom-access-to-dimension-data-analysis-services
Topics
Community Discussion
No community discussion yet for this question.