question

ovonemty avatar image
0 Votes"
ovonemty asked LukasYu-msft commented

What is user starting S-1-5-21-1687699058... ?

In the Role Manager section:
101310-image.png



I see a user added that has name S- 1 -5-21 -1687699058-...

What is this user? can I safely delete it? (is there any documentation regarding this?)

THanks,

sql-server-analysis-services
image.png (19.6 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Have you tested to delete this id ? Any feedback for this case ?
If we could assist further please do not hesitate to post here. :)

1 Vote 1 ·
LeonLaude avatar image
1 Vote"
LeonLaude answered

Hi @maca128-1653,

Something here might be helpful:

SIDs added by Windows Server 2012 and later versions
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/security-identifiers-in-windows#sids-added-by-windows-server-2012-and-later-versions


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)


Best regards,
Leon

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DarrenGosbell-0123 avatar image
2 Votes"
DarrenGosbell-0123 answered

I see a user added that has name S- 1 -5-21 -1687699058-...

What is this user? can I safely delete it? (is there any documentation regarding this?)

When you add a user to a role in SSAS the role actually stores the users Security ID (which is this S- number) not domain\user. This is so that if you rename an account for some reason it will not break their access to the SSAS database.

When you open the roles dialog in SSAS it matches the SID back to users in AD and displays them in domain\user format. If you see any of these SID values it typically means that there are users in the role that have been deleted from AD (probably because they have left the company). So it is safe to delete these references. In fact you may not actually be able to save changes to the role until you delete these orphaned SID references.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LukasYu-msft avatar image
0 Votes"
LukasYu-msft answered

Normally, we should have user name in domain stored in the role member. I think it is safe to delete the unknow member. If particular user has lost his permission to the cube, we could add them back. Delete this would not harm much.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.