MicroStrategy 7 Administrator Guide

Security roles
Security roles are collections of privileges which can be reused from project to
project. For example, you may create a security role which allows users to access
all the editors except for the Document Editor. Once you create this security role,
you can save it and use it in any project registered with the server. The users
associated with a particular security role can vary by project.
The following security roles are provided by default:
• Normal Users: the Normal Users security role has no privileges granted.
• Power Users: the Power Users security role has all privileges granted.
C
O
N
C
E
P
T
S
Security filters
Security filters prevent users from seeing certain data in the database. If two users
with different security filters run the exact same report, they may get different
results. For example, a regional manager may have a security filter that only
allows her to view data from her particular region regardless of the report she runs.
A security filter has these parts:
• Filter expression specifies the subset of the data that a user can analyze.
• Top range attribute specifies the highest level of analysis to which the
security filter is applied. If this is not specifically specified, then the security
filter applies to every level higher than the bottom range attribute.
• Bottom range attribute specifies the lowest level of analysis to which this
security filter is applied. If this is not specifically specified, then the security
filter applies to every level lower than the top range attribute.
1RWHÃWhen neither a top range attribute nor a bottom range attribute is
specified, then the security filter is applied to every level of analysis.
$ÃPRUHÃGHWDLOHGÃH[DPSOH
A store manager in London may be allowed to analyze the sales of only the
London store and nothing else. If she wants to see information for market or
region then she only gets the London portion of that information.
A user with the following security filter can analyze information for the London
store and any level lower. Any level above the store will be changed to Store level
only.
• Security Filter
◊ Filter expression: Store = London
MicroStrategy Intelligence Server access control 37