Use this dialog box to define a
In this dialog box, there are two ways to allow or deny access to specific cells or groups of cells. You can type an expression in Multidimensional Expressions (MDX) to allow or deny access to specific cells or groups of cells. The MDX expression resolves to either TRUE or FALSE for each cell (atomic and nonatomic) in the cube. (If the MDX expression resolves to a numeric value, any nonzero value is evaluated TRUE, and zero is evaluated FALSE.) If the expression resolves to TRUE for a cell, access is allowed. If it resolves to FALSE, access is denied.
You can also click Build to display MDX Builder, in which you can construct the MDX expression by using drag-and-drop techniques.
This dialog box is displayed when, in the Cells tab of the Create a Cube Role or Edit a Cube Role dialog box, you select Advanced in the Cell Security box, and then select a permission in the Advanced Cell Security box. Next, select Custom in the Rule column, and then click the edit (...) button in the Custom Settings column.
Permission
View the permission to which the custom rule applies. This box is read-only.
Description
View or enter a description of the custom rule.
MDX
View or enter the MDX expression that defines the custom rule. You can also use the edit button (...) to open the MDX builder, where you can create an MDX expression.
You can allow access to cells for a dimension member by including the following elements in the expression:
Cells for other members in the dimension are not accessible.
For example, to allow access to cells for the USA member in the Geography dimension but deny access to cells for all other members in that dimension, use the following expression:
Geography.CurrentMember.Name = "USA"
Alternatively, you can deny access to cells for a member by substituting the inequality operator (<>). Cells for other members in the dimension are accessible. For example, to deny access to cells for the Brazil member in the Geography dimension but allow access to cells for all other members in that dimension, use the following expression:
Geography.CurrentMember.Name <> "Brazil"
To include a member's descendants in the access criteria, add the Ancestor function and the member's level name to the expression. For example, to deny access to cells for the Brazil member and all its descendants in the Geography dimension but allow access to cells for all other members in that dimension, use the following expression:
Ancestor(Geography.CurrentMember,[Country]).Name <> "Brazil"
To include multiple dimensions from the cube in the access criteria, write an expression for each dimension and combine them into one expression using AND or OR. (Dimensions that are excluded from the expression do not impose restrictions on cell access.) For example, the following expression allows access to cells for the Tokyo member and its descendants in the Geography dimension but denies access to cells for all other members in that dimension. It also denies access to cells for the Sales measure, including Sales cells for Tokyo and its descendants.
Ancestor(Geography.CurrentMember,[City]).Name = "Tokyo" AND
Measures.CurrentMember.Name <> "Sales"
For more information and examples, see Custom Rules in Cell Security.
Check
Checks the cell security syntax.
OK
Closes the dialog box and displays the Cube Role dialog box. To save the custom rule, click OK in the Cube Role dialog box.