Create and manage roles
APPLIES TO: SQL Server Analysis Services Azure Analysis Services Power BI Premium
Roles, in tabular models, define member permissions for a model. Roles are defined for a model project by using the Role Manager dialog box in SQL Server Data Tools (SSDT).
If you're deploying your project to Azure Analysis Services, use Integrated Workspace as your workspace database. To learn more, see Workspace database.
The tasks in this article describe how to create and manage roles during model authoring by using the Role Manager dialog box in SQL Server Data Tools (SSDT). For information about managing roles in a deployed model database, see Tabular Model Roles.
To create, edit, copy, and delete roles, you will use the Role Manager dialog box. To view the Role Manager dialog box, in SQL Server Data Tools, click the Model menu, and then click Role Manager.
To create a new role
In SQL Server Data Tools, click the Model menu, and then click Role Manager.
In the Role Manager dialog box, click New.
A new highlighted role is added to the Roles list.
In the Roles list, in the Name field, type a name for the role.
By default, the name of the default role will be incrementally numbered for each new role. It is recommended you type a name that clearly identifies the member type, for example, Finance Managers or Human Resources Specialists.
In the Permissions field, click the down arrow and then select one of the following permission types:
Permission Description None Members cannot make any modifications to the model schema and cannot query data. Read Members are allowed to query data (based on row filters) but cannot make any changes to the model schema. Read and Process Members are allowed to query data (based on row-level filters) and run Process and Process All operations, but cannot make any changes to the model schema. Process Members can run Process and Process All operations. Cannot modify the model schema and cannot query data. Administrator Members can make modifications to the model schema and can query all data.
To enter a description for the role, click the Description field, and then type a description.
If the role you are creating has Read or Read and Process permission, you can add row filters using a DAX formula. To add row filters, click the Row Filters tab, then select a table, then click the DAX Filter field, and then type a DAX formula.
To add members to the role, click the Members tab, and then click Add.
Role members can also be added to a deployed model by using SQL Server Management Studio. For more information, see Manage Roles by using SSMS.
In the Select Users or Groups dialog box, enter Windows user or Windows group objects as members.