Portfolio views and Domain Admin

[Woody]

Hello,

All the Project Server users have Windows accounts: they have been
synchronized with Active Directory. All of them have the Administrator
permissions in Project Server

But only these users which are members of the "Domain Administrator" group
in Windows Server AD have access to the Portfolio views.

Why ? Thanks for any hint!

Woody

 

[Hugues Perron]

Hi Woody,

To have access to the portfolio views, users must be members of the
local OLAP Administrators group. Probably the Domain Administrator group
is included in the OLAP Administrator group

Hope this helps

Hugues Perron
http://hperron.net


Woody a écrit :

 

[Samer Beano]

Hi Woody,

Can I ask why all the users have the administrator permission in project
Server?! I think this is a bad idea! You have to give the users their real
roles permission (ie, Project Manager, team Member, Executive ...)

To Answer your Question, You have to create a domain group lets name it
EPMOlapGRP and add the users who need to access the Portfolio views to this
Group.
Now you need to create the role for tsi group, to do so follow these steps:
1. On the SQL Server server, click Start, point to Microsoft SQL Server,
point to Analysis Services, and then click Analysis Management.
2. In the left pane, expand the server and then select your cube,
Right-click the cube, then click Manage Roles.
3. Click New, and then type a name in the Role name box. Select Server in
the Enforce On list. On the Membership tab, click Add and then add the
EPMOLAPGRP group.
4. On the Cubes tab, click Check All, and then click OK.
Grant the EPMOLAP group the db_Owner role on the EPMCube database in SQL
server

Hope This Helps

 

[Woody]

Hi Samer,

Thanks for your detailled explanations
<< I think this is a bad idea>> I agree ! But I have only 4 users and I
swear that the next users I'll create will not have the Administrator
permissions !
Nevertheless, I bump on your 4th step : I don't have any "Cubes" tab in my
dialog box at this time... ;-(
Thanks again for your help!

Woody

 

[Woody]

Thanks Hugues,

That's clear for me now!

Woody

Hi Woody,

To have access to the portfolio views, users must be members of the local
OLAP Administrators group. Probably the Domain Administrator group is
included in the OLAP Administrator group

Hope this helps

Hugues Perron
http://hperron.net


Woody a écrit :

 

[Samer Beano]

Woody,

I'm sure you can see 4 tabs (Membership, Cubes, Mining Models & Dimension)
in the center of the (create a database role) page.
Can you verify this please?

 

[Woody]

Samer,
In the Create a Cube role dialog, I only have the 4 tabs : (Transcription
from French version)
- Membership
- Dimensions
- Cells
- Options

Woody

 

[Hugues Perron]

Ça me fait plaisir !

Hugues

Woody a écrit :

Thanks Hugues,

That's clear for me now!

Woody

 

[Samer Beano]

Woody,

Try cells and let me know

 

[Hugues Perron]

Why not include EPMOlapGRP in the OLAP Adminstrators group ? Much more
simple

Hugues Perron
http://hperron.net

Samer Beano a écrit :

 

[Gary L. Chefetz [MVP]]

Domain Admins are much mightier than OLAP Admins. Users don't need to be
members of either of these groups to have access to the OLAP cube. They
simply need to be a member of a group that is associated with a cube role,
or directly associated with a cube role. As a best practice, I would not
give users admin access of any sort.

 

[Samer Beano]

Woody,

The only way that you could have gotten these 4 tabs (Membership, Dimension,
Cells & Options) is that if from Analysis Manager you have opened the Server,
then opened the Cube then clicked Manage Roles. You should right click the
server name and click manage roles then I'm sure you will get the other 4
tabs.\

Let me know if it works

 

[Woody]

Thanks a lot Samer !
I found it!

Woody,

The only way that you could have gotten these 4 tabs (Membership,
Dimension,
Cells & Options) is that if from Analysis Manager you have opened the
Server,
then opened the Cube then clicked Manage Roles. You should right click the
server name and click manage roles then I'm sure you will get the other 4
tabs.\

Let me know if it works

 

[Samer Beano]

Its my Pleasure Woody
Enjoy EPM