IT Management Suite

 View Only
Expand all | Collapse all

NS7.1 Roles versus Accounts for IT Analytics

  • 1.  NS7.1 Roles versus Accounts for IT Analytics

    Posted Mar 15, 2011 02:30 PM

    I am running into an interesting situation while trying to set up user access to the IT Analytics reports within the Symantec Management Console. We have added several user ACCOUNTS from our AD to the pre-configured 'IT Analytics Users' ROLE. I then go to add that ROLE to the security tabs of the Cubes and Reports Configuration pages. I click on 'Add New Members', click 'Find,' select the 'IT Analytics Users' Role and click OK. The IT Analytics User Role shows up in the Role Members list. I click Save Changes, the screen refreshes, and the IT Analytics Role disappears from the list with a Save Successful message along the top. To verify the permission setup, I then navigate to the Report Manager Console in IE and neither the Role nor any of the Accounts which are members are listed, and none of the Accounts can access any of the reports. However, if I add the user Accounts directly to the Reports Security Tab and save, the Accounts remain listed in the Role Members list. When verifying the security on the Report Manager Console after this method, each of the manually added user Accounts is listed and can navigate to and run the reports. Similarly, when attempting to set up the Cubes Security. The IT Analytics Users Role is listed under Security Roles I check the box next to the Role and setting up the Cube Permissions via 'Manage Cube Permissions,' and Save Changes. I once again receive the Security settings saved successfully message. To verify the permissions I then log into SSAS on the hosting SQL server with the SMP account. Expanding the Role within SSAS, the IT Analytics Users role is listed. However, when browsing to Properties - Members, none of the Accounts added to the Membership of the Role within SMC are listed with access. Alternatively, if I go back to the Cubes Security tab and under Manually Managed Security Roles, click New, create a new Role ('TEST'), add user Accounts and Cube Read Access to it, the 'TEST' Role AND the associated user Accounts show up in SSAS. The above scenarios indicate to me that the SMP account used by the SMC has the correct permissions to both the SSRS and SSAS components of the SQL Server. What I can't figure out is 1) why aren't the SMC Roles being populated in SSRS and 2) why the SMC is successfully creating the Roles in SSAS, but isn't bringing the Member Accounts with it unless manually created? I have to be missing something somewhere. I have read through the IT Analytics User Guide and am seemingly following the proper steps. Is anyone else experiencing anything similar to this?



  • 2.  RE: NS7.1 Roles versus Accounts for IT Analytics

    Posted May 04, 2011 11:30 AM

    No one else has seen anything like this?