Grant

Grant a permission, a filter or a stored calculation to a user or a group.

Syntax

You can grant permissions to users and groups in the following ways using grant.

Keyword	Description
create_application to...	Grant Create/Delete Applications permission to a user or group.
create_user to...	Grant Create/Delete Users/Groups permission to a user or group.
no_access to...	Revoke any permissions the user or group may have.
administrator to...	Grant Administrator permission to a user or group.
no_access on application...to...	Revoke any permissions the user or group may have on the specified application.
manager on application...to...	Grant Application Manager permission to a user or group for the specified application.
no_access on database...to...	Revoke any permissions the user or group may have on the specified database.
read on database...to...	Grant Read permission to a user or group for the specified database.
write on database...to...	Grant Write permission to a user or group for the specified database.
manager on database...to...	Grant Database Manager permission to a user or group for the specified database.
filter <filter-name> to...	Assign a filter to a user or group that grants or denies permissions to the specified database at a data-value level of detail.
execute <calc-name> to...	Grant the user or group permission to run the specified stored calculation script.
execute any on system to...	Grant the user or group permission to run any calculation against any database on the Essbase Server.
execute any on application...to...	Grant the user or group permission to run any calculation against any databases in the specified application.
execute any on database...to...	Grant the user or group permission to run any calculation against the specified database.
execute default on system to...	Grant the user or group permission to run the default calculation against any database on the Essbase Server.
execute default on application...to...	Grant the user or group permission to run the default calculation against any databases in the specified application.
execute default on database...to...	Grant the user or group permission to run the default calculation against the specified database. The default calculation is typically 'CALC ALL;', but it can be changed using alter application set default calculation.

Notes

Granting permissions:

At each level (system, application or database) existing roles are replaced. However, the built-in privileges create_user and create_application are not replaced.

After granting a permission to a user or group, it can be revoked by subsequently granting no_access. However, to prevent users from being able to load the application, you should also grant no_access at the application level.

Granting filters:

There may be only one filter per user per database. Therefore, granting a filter replaces any filters the user may already have on that database.

Filter permission can be revoked from users and groups by using the revoke filter clause of Alter User and Alter Group.

Granting calculations:

A user or group may have any number of calculations per database. Therefore, granting a calculation adds it to the user or group's list of calculations. Grant execute any gives the user or group permission to execute all calculations, including the default calculation.

After granting execute permission, the permission can be revoked by subsequently granting no_access to the database. However, to prevent users from being able to load the application, you should also grant no_access at the application level.

Example

grant no_access to NewGroup;
grant administrator to Fiona;
grant manager on application Sample to Fiona;
grant read on database Sample.basic to Fiona;
grant filter Sample.basic.filter8 to Fiona;