Grant

The MaxL grant statement helps you assign an Essbase security filter or a stored calculation to a user or group. If Essbase uses EPM Shared Services security mode, you can also grant privileges and roles.

Syntax

Description of the illustration grant.gif

You can grant permissions to users and groups in the following ways using grant.

Keywords

<SYS-SYSTEM-PRIVILEGE>: Grant a system-level privilege to a user or group. Available only if Essbase uses EPM Shared Services security mode.
<SYS-SYSTEM-ROLE>: Grant a system-level role to a user or group. Available only if Essbase uses EPM Shared Services security mode.
<APP-SYSTEM-ROLE>: Grant an application-level role to a user or group. Available only if Essbase uses EPM Shared Services security mode.
<GRANTED-DBS-SYSTEM-ROLE>: Grant a database-level role to a user or group. Available only if Essbase uses EPM Shared Services security mode. In this mode, user or group access can only be assigned at the application level. If the application has more than one database (cube), trying to change access for one cube implicitly changes the access privilege on all cubes belonging to that application.
filter <filter-name> to...: Assign a filter to a user or group that grants or denies permissions to the specified database at a data-value level of detail.
execute <calc-name> to...: Grant the user or group permission to run the specified stored calculation script.
execute any on system to...: Grant the user or group permission to run any calculation against any database on the Essbase Server.
execute any on application...to...: Grant the user or group permission to run any calculation against any databases in the specified application.
execute any on database...to...: Grant the user or group permission to run any calculation against the specified database.
execute default on system to...: Grant the user or group permission to run the default calculation against any database on the Essbase Server.
execute default on application...to...: Grant the user or group permission to run the default calculation against any databases in the specified application.
execute default on database...to...: Grant the user or group permission to run the default calculation against the specified database. The default calculation is typically 'CALC ALL;', but it can be changed using alter application set default calculation.

Notes

Granting filters:

Users may be granted multiple filters per database.

Granting calculations:

A user or group may have any number of calculations per database. Therefore, granting a calculation adds it to the user or group's list of calculations. Grant execute any gives the user or group permission to execute all calculations, including the default calculation.

Example

grant filter Sample.basic.filter8 to Fiona;