When trying to build an OLAP cube, we kept getting "Your permissions on the server computer do not allow you to administer this analysis server".
Technologies involved
Project Server 2007 (SP1, Infrastructure Update)
SQL Server 2005 SP2
Issue
When trying to build an OLAP cube, we kept getting "Your permissions on the server computer do not allow you to administer this analysis server".
In our environment, we wanted to configure Analysis Services to use SQL DB, not Jet database.
After ensuring the security permissions and related steps (http://technet.microsoft.com/en-us/library/cc197489.aspx), we still kept getting this issue.
Turns out that the error message "Your permissions on the server computer do not allow you to administer this analysis server" is a catch all message and the final resolution turns out to be a poorly documented step.
Resolution
It is very important to ensure that all security settings have been applied as documented within http://technet.microsoft.com/en-us/library/cc197489.aspx (especially verifying that ssp service login can access the Analysis services)
If you still keep getting this message, the most likely cause is the missing additional steps listed below.
Note: This is just valid for Analysis services repository residing in SQL database (not Jet database)
- Follow the steps listed below (copied from http://technet.microsoft.com/en-us/library/cc197552.aspx)
Create a shared folder for the repository
You must create a shared folder in SQL Server 2005 Analysis Services where the repository will be located. You also must make the shared folder accessible to accounts that will need to access it.
Create the shared folder
1. In Windows Explorer, browse to the folder containing the Analysis Services installation. By default, it is located at: C:\Program Files\Microsoft SQL Server\MSSQL.X\OLAP
2. In this folder, create a new folder and name it DSO9.
Note
If the subfolder MSSQL.2\OLAP does not exist, use the \OLAP folder in one of the MSSQL.X subdirectories.
3. Right-click the DSO9 folder, and choose Sharing and Security.
4. On the Sharing and Security page, in the Sharing tab, select Share this folder. In the Share Name box, type MSOLAPRepository$ as the share name for the folder.
5. In the Security tab, in the Group or user names list, select SQLServer2005MSOLAPUser$SERVERNAME$MSSQLSERVER. Select the Allow check box next to the Full Control item in the Permissions list, and then click OK.
6. Click Add. On the Select Users, Computers, or Group page add the account running the Project Server Queue service on the Project Server application server. Click OK.
Note
To verify this account, on the Project Server application server, click the Start menu, click Programs, click Administrative Tools, and then click Services. Double-click Microsoft Office Project Server Queue Service and note the account on the Log On tab.
7. In the New Folder Properties page, click OK.
- For MSOLAPRepository$ share, please ensure that SSP service login also has full control over the share
- Within In addition to DSO\RemoteRepositoryConnectionString as well as DSO\RepositoryConnectionString (Configure Analysis Services to use a SQL Server repository database Pasted from <http://technet.microsoft.com/en-us/library/cc197552.aspx> ) also fill in values DSO\RemoteLockDirectory (for e.g. set it to "\\AS_Server_Name\MSOLAPRepository$") and DSO\LocksDirectory (for e.g. set it to "C:\Program Files\Microsoft SQL Server\MSSQL.X\OLAP\DSO9)
Hopefully after performing the above 3 steps, you should be able to build the cube.
