Menu
Download Free Trial
Table of contents

MS Analysis Services / Configuring username/password protection

Overview

Flexmonster Pivot Component supports credentials to access the data source. It is commonly used for the following purposes:

  • provide credentials for data source connectivity
  • provide access for users with different roles and access levels

Here are the step-by-step instructions to configure secure connection with username/password protection and define different usernames on the client side. If you connect to the cube via XMLA you can use roles from MSAS.

Requirements

  • Flexmonster Pivot Component version 2.205 or higher
  • Microsoft Analysis Services installed and configured
  • Microsoft .NET Framework 4 or higher

Step 1: Configure secure HTTP endpoint for accessing an Analysis Services

First of all, you need to set up HTTP endpoint for Analysis Services on IIS server. If it is already done, skip this step. Regarding IIS configuration, please refer to the MSDN documentation. In this step, you also configure authentication types.

Step 2: Create a default user for Accelerator

One username/password is used in the flexmonster.config file for the Accelerator on the server side. In general, Accelerator will use these credentials if client-side report does not contain own credentials. Also, these credentials are used to start the Accelerator, check connection to the data source and connect anonymous users. So, it is recommended to create a user for Accelerator with default privileges and DO NOT use an admin account for this purpose.

Navigate to Control Panel > Administrative Tools > Computer Management and choose System Tools > Local Users and Groups > Users. Add a new user (i.e. flexmonster) by right-click as shown in the screenshot.

add-user-screen

Step 3: Configure Accelerator

Open flexmonster.config and specify following CONNECTION_STRING parameters:

CONNECTION_STRING=Data Source=<endpoint_url>;UID=<username>;Password=<password>;

Where:

  • <endpoint_url> – URL to HTTP endpoint (i.e. http://localhost/ssas/msmdpump.dll)
  • <username> – username of the default user (i.e. flexmonster)
  • <password> – password of the default user

Accelerator is ready to be launched and should successfully connect to the data source. Just run the flexmonster-proxy-ssas.exe with Administrator privileges.

You can check the Accelerator is up and running by navigating to its URL in the browser (i.e. http://localhost:50005).

Configuring MSAS roles

Use roles from MSAS to manage permissions for different users. Have a look at the following sample (replace proxyUrl, catalog, cube and roles parameters with your specific values):

{
    dataSource: {
        dataSourceType: "microsoft analysis services",
		// URL to msmdpump.dll 
        proxyUrl: "http://olap.flexmonster.com/olap/msmdpump.dll",
        catalog: "Adventure Works DW Standard Edition",
        cube: "Adventure Works",
        // roles from MSAS (only via XMLA protocol)
        roles: "admin,manager"
    }
}