Does Microsoft SSAS measure security work in Analysis Studio?

[BISandra]

I have applied measure security in SSAS 2008 and it works as intended within the Microsoft environment, but when I open the cube in Analysis Studio (Cognos 10.1.1) I can see the measures that I have no access to, and when trying to use them, it gives me the error message "ans-mes-0003".
In Microsoft environment I cannot see the measure at all.

When setting measure security in SSAS I use the measure dimension under the dimension data tab and deselect the measures I want to hide for the user group.

Has anyone gotten security on measures in a Microsoft cube to work in Cognos?

[MFGF]

Hi,

How has Cognos 10 been configured to connect to MSAS - using each user's identity, or using a single user for all access? I would suspect the latter, and that the user being used to connect to MSAS has access to all measures in the cube. It's worth asking your Cognos admins about this.

Regards,

MF.

[BISandra]

We use single user authentication to the cube. The security set on the dimensions works as intended. For example a specific user can only see data for his/her market.
But when we also set the security to the measure dimension, it throws an error message when trying to use measures that you do not have permission to use. (the error message does not say anything useful for the user, unfortunately)

[ukflix]

Hi MFGF

"using each user's identity, or using a single user for all access".  My understanding is that you can only pass the credentials of the Cognos Service.  Your comment implies that it is possible to pass each individual users credentials to the SSAS cube, is this true please?  If so, I would really appreciate how please?
Thanks
ukflix

[sir_jeroen]

MFGF is correct. To pass the user credentials the service account must be able to imporsonate the user that's running the report.
And if I'm correct you must also make sure that you are using Kerberos Authentication when connecting to AD (so do net set singleSignonOption = IdentityMapping)

[ukflix]

We can now access the MSAS cube using each Cognos Users Identity.