MDX Expression to restrict access to Measure Group

Question

Say I have a bunch of measures which I wanted certain people to be unable to see (or vice versa only allow them to see) what kind MDX expression would I add to the SSAS Role?

I can get the user identity through the USERNAME function.

Is it even possible?

I can easily construct Dimension based security expressions, but I can't see how the Measures dimension access can be similarly curtailed.

Answer 1

This is the Cell Data tab in the role file.

When you enable the read permissions, the user will be dissallowed any access to cell data inside the cube.

In this place you must define the set of measures that the user will be able to see by providing the proper MDX epression.

The scope declation will provide you with information to write MDX expressions for the definiton of the data sets. (SCOPE is used for a totally different purpose and should not be used for permissions - only for reference for the needed MDX expressions)