Analysis Services security

Who is online?  0 guests and 0 members
Home  »  Forums   »  microsoft business intelligence   »  analysis services   » Analysis Services security

Analysis Services security

Topic RSS Feed

Posts under the topic: Analysis Services security

Posted: 5/8/2012

Jedi Youngling 8  points  Jedi Youngling
  • Joined on: 1/5/2012
  • Posts: 4

2008 Analysis Services cleanup. I want to remove logins that have SSAS admin permissions. Getting "no mapping between account names and security IDs was done" error when trying to remove them via instance-->properties-->security. Found some threads on this but nothing has worked. The login I want to remove is not a local server admin.


Posted: 5/8/2012

Jedi Youngling 70  points  Jedi Youngling
  • Joined on: 7/7/2010
  • Posts: 20
Answered  Answered

This is a typical presentation of an AD issue.  

It would be nice if the error could tell us which account names or security ID's are not mapped.

I would guess that you're using groups in your security and that a user that no longer exists (other than the one you're trying to remove - which quite likely exists lol) might be a member of said group.  You need to find this record in the AD group or perhaps even in the Security window itself (do you see guids?  remove them - they're users that dont' exist in AD or your local account space anymore).

 

Give it a shot - and give us an update :)


Posted: 5/9/2012

Jedi Youngling 8  points  Jedi Youngling
  • Joined on: 1/5/2012
  • Posts: 4

Feemur,
I was thinking the domain\user I was trying to remove was the problem. I do see 3 items in the server administrators list
under Analysis Services properties with the format X-9-9-99-999999999-9999999999-999999999-9999. Are these the guids you mentioned?


Posted: 5/9/2012

Jedi Youngling 8  points  Jedi Youngling
  • Joined on: 1/5/2012
  • Posts: 4

I neglected to mention that I am not using groups just domain logins.


Posted: 5/9/2012

Jedi Youngling 70  points  Jedi Youngling
  • Joined on: 7/7/2010
  • Posts: 20

Yes.

Remove these and you should be fine.


Posted: 5/9/2012

Jedi Youngling 8  points  Jedi Youngling
  • Joined on: 1/5/2012
  • Posts: 4

I was able to identify the 3 sids were read only domain accounts. I was able to remove them but only when I selected all of them and then clicked the remove button. Removing one at a time doesn't work. Go figure! Thanks for the help.


Page 1 of 1 (6 items)