Joe the Business Intelligence Guy

A journey through the design and delivery of business intelligence solutions.

SSAS Testing Security Using Local Accounts

Just wanted to share some interesting details regarding configuring Analysis Services (SSAS) security via Roles on a local computer. Turns out that the Change User functionality found within both SQL Server Management Studio (SSMS) and Business Intelligence Developer’s Studio (BIDS) seem to rely upon the domain to which the computer running the applications is joined and as a result does not permit changing to a local user account.

The scenario is that I have setup local accounts such as MachineName\EOne in order to test dynamic dimension security within Analysis Services (SSAS). I launch SSMS normally and it shows me connected using my domain account MyDomain\MyAccount. I then click on a cube and select browse. From the browse window, I then click the change user tool, select Other User, and provide the MachineName\EOne user account.


The first observation to note is that after browsing and selecting the account, the Security Context dialog returns to the selection; but, does not append the local machine name domain.


After accepting the setup I am returned to the cube browser and greeted by the error that “There are currently no logon servers available to service the logon request.”


After changing my Analysis Services (SSAS) server’s service account (tried Local System, Local Service, Network Service, and a custom machine account), I was left with the same problem connecting via the Change User option.

I finally resolved this by connecting to SSMS via the runas command from a command window using the /user: option to change what account should run the application. The specific command used was: runas /user:MachineName\EOne "C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\Ssms.exe"

The result in SSMS was a successful connection using a local machine user account as shown in the following:



Written by Joe Salvatore

December 13, 2012 at 12:42 pm

Posted in Uncategorized

%d bloggers like this: