Security Roles - What Each Does

[Ovatvvon]

I have little exposure to A.S.

There are three security levels: Read Def (which I presume only allows users to read the cubes, etc); Process database, and then Full control.

If users need to create cubes, etc, will they need full control? What is the difference between process database and full control?


-Ovatvvon :-Q

 

[justins57]

Ovatvvon,

Full control (Administrator) Assignment to the Full control role gives complete access to the database, including data, schema, processing, and operations. Administrators can also manage security roles.

Process database The Process database role allows SSAS processing. This means a user can be limited to processing the database in which the role is created. However, this option does not give a user read access to the data or definition; read access must be assigned separately.

Read definition The Read definition role lets a role member see the full definition of a database; it does not allow a user to have data-access rights or processing rights.

Justin