Hi,
Thanks for the help with the previous query. Now my latest muse:
I have 1 scorecard that has a filter, 2 OLAP scorecards and 2 AC reports (filter applies to all) on it, and that there are 3 options within the filter: Group A, B and C.
If I have various Sharepoint Groups with members in Groups A,B,C or All, is it possible so that when a member from group A goes to the dashboard they will only see Group A in the filter or that the scorecard / reports will only work for the Group A data. If someone from group All goes to the Dashboard they will see all options ion the filter available. Basically is it possible to pass the sharepoint userID over to the dashboard in any way?

I think the post "Passing Parameters via URL to PerformancePoint dashboard " is somewhat similiar but says it can't be done.
However the PerformancePoint Monitorong SDK comment
"A wizard template that creates a team-specific dashboard by prompting for the name of the team leader. The wizard could suggest or ask for the metrics to track, and then generate a dashboard that contains KPIs, scorecards, and reports for the team." gives me hope....

Cheers

i dont think what you want is possible becuase you want to leverage Sharepoint groups.

If instead you had those groups created in Active Directory then it is possible.There is more than one way to achieve this -it depends on how you are populating the filter. I have gotsimilar functionality working on dashboards i have done

Thanks, we don't have the users set up as AD accounts, butwecould probablychange our set up. I populate the data from a SSAS cube. If you could giveme a point in the right direction /examples, it would be greatly appreciated

Cheers

hi there,

sorry for the delay in replying..

We had a situation similar to yours - we needed a dashbaord with one filter, but the filter needed to be dynamic based on the user. This filter was a list of business units, so of course some users have access to only one unit while some have access to all or maybe just a few.

The filter was populated via an "organisational structure" dimension in our cube.. so we setup roles in the cube and then set up dimension level security (i.e. we gave the various roles access to only certain members of the dimension). The AD users already belonged to AD security groups which catered for variosu combinations of business units. So we just added the AD groups to the appropriate SSAS roles.


The difficult part is then setting up your IIS, PPS and SSAS installations to allow kerberos authentication. There are quite a few steps involved and many places you may go wrong but it does work well when its all configured. Heres what i suggest you read:

First enable user based security in PPS (i.e. this means you wont be using your impersonation accounts any longer because PPS will try to pass the AD user to your data source):

Nick Barclay has an informative post on this, but we didnt use the "CustomData" method.. only used the information on how to configure PPS to user per user security. Note here the potential performance drop... we have relatively simple dashboards so performance didnt suffer.

http://nickbarclay.blogspot.com/2008/01/pps-data-connection-security-with.html


Then setting up kerberos, SPNs etc for the domain:

http://technet.microsoft.com/en-us/library/bb838775.aspx


I highly recommend running trace on your SSAS database when you test this all out. if its setup correctly you will clearly see the username coming through on the trace.. otherwise connections will be made as "ANONYMOUS" and depending on your role configuration the PPS filter will be completely empty.

If things just dont seem to work also check your Windows event logs on the data source and the PPS server.. you may see some Kerberos authentication errors that will help you understand what is going wrong. I found the easiest place to stumble is the SPNs.

Good luck!!

Thanks will have a go

hopefully this question isn't to far off the topic.

I have a new sharepoint farm and trying to create  [%userid%] site creation.  If I take out this [%userid%]  then my users can create a site but if I have it in they cannot.  any assistance would be greatly appreciated.