MicroStrategy 7 Administrator Guide

$XWKHQWLFDWHGÃXVHU
The authenticated user provides the following information to MicroStrategy
Intelligence Server:
• User identity: Determines an object’s owner. Also determines whether or not
a user has been granted the right to access an object.
• Group membership: A user is granted access to an object if he belongs to a
group which has access to the object.
• Special privileges: A user may possess a special privilege which causes the
normal access checks to be bypassed.
C
O
N
C
E
P
T
S
2EMHFWÃRZQHU
Objects keep a record of their current owner. Typically, the owner is the user who
created the object. The owner or an administrator decides who may access the
object and what type of access is granted.
$FFHVVÃFRQWUROÃOLVW
The access control list of an object is a list of users and groups and the
permissions that each one has for the particular object. Access control lists have
the following information:
• User: The name of the user or group which is granted or denied access to the
object.
• Permissions: The degree to which the user or group is granted or denied access
to the object. The available permissions are:
◊ Browse: Allows you to see an object in the Folder List and Object Viewer.
◊
◊
◊
◊
Use/Execute: Allows you to use an object needed for execution for
example, a filter that needs to be used in a report execution.
Read: Allows you to view the object’s definition and access control list.
Write: Allows you to modify the object definition, but not the object’s
access control list.
Delete: Allows you to delete the object.
◊ Control: Allows you to modify the access control list of an object and take
ownership of an object.
• Inheritable: Applies only to folders. If set, any objects placed in the folder will
inherit the folder’s entry in the access control list.
For more details about the permissions available in the MicroStrategy
environment, see the following appendix:
Appendix D: Permissions and privileges
MicroStrategy Intelligence Server access control 35