# Managing Roles

The Roles page manages OLAP database roles used to hide or show specific data to particular group or user. The page is only visible to users with administrative rights to Analysis Server.

# Adding a New Role

1. Click New Role located at the bottom-right of the list.

   Add New Role dialog will appear.

2. Provide a descriptive name for the role in the Role Name textbox.

3. Provide description for the role in the Description text area.

4. Choose among the Database Permissions options.

   Permission	Description
   Full Control (Administrator)	Gives all the administrative rights to the role members over an Analysis Services database, such as querying and processing ay object in the database. Selecting this option will choose the Process Database and Read Definition permissions automatically.
   Process Database	Delegates the ability of processing all the objects within a specific database.
   Read Definition	Gives the ability to read object metadata but not including the ability to view its associated data.

   Administration: Roles Database Permissions
   
   

5. Choose among the available cubes - Applications and Storage.

6. Choose among the Cube Permission options.

   Permission	Description
   Read	Only view data of the specific OLAP cube.
   Read/Write	View and modify data of the specific OLAP cube.

   Administration: Roles Cube Permissions
   
   
   When adding new roles, it is important that least Read permission to Applications cube is selected. Configuring role without any permission to the OLAP cube will prohibit the included role members to view any data.

   

   Analysis Server Administration: New Role Permissions

   7. Click Save to continue.

      The newly crated role will appear in the list.

      

      Analysis Server Administration: New Role Added

# Adding Role Members

To add members to a specific role:

1. Choose the role to add members.

2. In the Members column, type the username of the member to add. This feature can only add members already included in the Active Directory or a registered local user.

3. Click Verify to confirm the identity of the member.

   The text box will turn green if the identity search succeeded; red if it failed.

4. Once successful, click the Add button.

   The list of members will automatically include the added username with its Security Identifier (SID).

# Deleting Role Members

To delete members from a specific role:

1. Choose the member to delete from a role.

2. Click the delete () symbol located on the left side of the role member.

   A confirmation message will appear.

3. Click OK to continue.

# Updating Role

To update the details of a specific role:

1. Choose the role to update.

2. Click the Edit button.

   Update Role dialog will appear the details of the role.

3. Make the desired changes.

4. Click Save to apply changes.

# Deleting Role

To delete a role:

1. Choose a role to delete.

2. Click the Delete button.

   A confirmation message will appear.

3. Click OK to continue.