Granting permissions to analysis services SQL Server 2014 with windows authentication

I am trying to deploy my first cube in SSAS but the deployment fails because a connection isn't established. The problem is related to giving privileges to SSAS from windows. It seems I have to create or change privileges to something called Local Windows Security Group that is associated with the SSAS.  The solution in the past (past versions) used to be : Right-click on data source in solution explorer and Select "View Designer", then go to "Impersonation info" tab and select Default option. I tried all options on that tab and non worked.

The exact error message is: Error 13 Parser: The syntax for the ImpersonationInfo object is incorrect. If the ImpersonateAccount value is used for ImpersonationInfo, then the Account property cannot be empty. 0 0

I found a document on the internet that describes how to do it, but I am not a security expert and was not able to follow https://msdn.microsoft.com/en-us/library/ms175371(v=sql.120).aspx Within the above document it says: The permission holder in Analysis Services is not the logon account, but a local Windows security group created by Setup that contains the per-service SID. Assigning permissions to the security group is consistent with previous versions of Analysis Services.

Anyone can explain how to connect to SSAS when you're on a local machine with windows authentication in simple English would be greatly appreciated.

September 7th, 2015 2:37pm

Uner which account is your SSAS Service running?
Free Windows Admin Tool Kit Click here and download it now
September 8th, 2015 3:24am

Hi

I think you'll find that on the server that's running the SSAS service there is a SSAS administrators group.  If you want to automate a refresh of your cube say from integration services then the account you use must be a member of this local (so on the SSAS Server) group.  If you go to computer management -> users and groups on your SSAS server you'll see a group called SQLServerMSASUser$... and so add your domain or group accounts to that group and you should be set 

Mark this as answer if that helped thx @deepfat

September 8th, 2015 3:37am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics