Wednesday, March 7, 2012

Deploying Analysis Server Project to another domain

I am looking for a way to deploy an Analysis Server 2005 project to a remote location. I can generate and XMLA create script, FTP the script to the remote location, and execute it to create the cube database on the other server.

However, the security roles inthe XMLA file contains SIDs instead of Active Directory Security group names. The server I am moving this database to is in another Domain and so the SIDs don't correspond to the same users. However, the Active Directory group names on the remote server are exactly the same as the Active Directory group names in my local domain. (The group names are the names of companies).

I am looking for a way to deploy this project to my remote server with the SIDs converted to the Active Directory group names.

Does anyone have any ideas? This type of deployment scenario will be quite common in my development environment.

I am using SQL2005 SP2, along with Visual Studio 2005.

Have a look at the Analysis Services Deployment Wizard, it has options for either

deploying the roles in full|||

I'll throw in my two cents. If the XMLA for your role contains:

<Members>

<Member>

<Name>YOURDOMAIN\yourusername</Name>

<Sid>S-1-5-21-4211028405-896031999-4015973603-1183</Sid>

</Member>

</Members>

I believe that you can cut out the Sid entirely. The following XMLA works fine for me:

<Members>

<Member>

<Name>YOURDOMAIN\yourusername</Name>

</Member>

</Members>

As for whether you can do without YOURDOMAIN\ in the above, I'm not sure. I know that if the group is local to the computer you're, then leaving off the domain works. But if it's a domain group, I'm guessing you've got to specify the domain. Worth testing, though.

No comments:

Post a Comment