Reporting Group

As a central component to IT Analytics Symantec Endpoint Protection Content Pack, SQL Server Analysis Services provides a wide range of advanced security opportunities. You can explore these opportunities through the SQL Server Management Studio. One such feature is the ability to filter the data that a role has access to by restricting access to specific members of a dimension.

For example, you can restrict access for the IT Analytics Users role to return the cube data only for computers with a workstation Operating System installed. Here we will assume you at least have granted access to the EP Computer cube for the IT Analytics Users role.

 To filter a role-based cube

1. In SQL Server Management Studio, in the IT Analytics analysis services database, navigate to the Properties for the IT Analytics Users role.
2. In the Edit Role dialog box, navigate to the Dimension Data page.
3. In the Dimension drop-down list, click the EP Computer dimension and select OK.

4. Select the Deselect all members radio symbol.
5. In the Attribute Hierarchy drop-down list, click Computer – Operating System. 

6. Select the dimension members that you want the role to have access to. In our example, there are three workstation Operating System members. Actual names are specific to each instance of Notification Server. 

7. Navigate to the Advanced tab of the Dimension Data page.
8. Click Enable Visual Totals. This step prevents the role from seeing the aggregate totals that are independent of the configured filtering and restricts aggregations. 

9. Click OK to save the role configuration. Users in the configured role now see the results only for the computers that have a workstation Operating System across all cubes. This filtering is enforced across all means of accessing the cubes including dashboards, cubes, reports, and third-party applications.