From Apriso 2018 release, MPI gets new functionality to fully support Microsoft Analysis Services roles which grant access to operations, objects or even data at pivot grid cell level. This powerful functionality lets MPI admins to hide values of dimension’s attributes which is particularly useful in case of enterprise MPI deployments. It may be used also to restrict read access to measures carrying some confidential data. SSAS roles are passed during connection attempt to MPI cube and are fully supported in Cube View, Dashboard Builder and MPI Excel add-in. 

SSAS roles are database roles with assigned membership for users with granted access. The roles are passed by Apriso Portal while connecting to MPI cube. 

Following example is sample scenario of revoking access to "Order Completed Full Count" metric from MPI. We can see in both pivot grids, the same Apriso user is working with the data. In the second use case, one of the required roles is missing for the user in employee role configuration. Instead of seeing values corresponding to particular project (row dimension field), we now see "Not available" sign in the pivot grid column. 
​​​​​​​​​​​​​​SSAS roles are fully supported in all Apriso tools designed to work with analytics data: 

• Cube View
• Dashboard Builder
• Excel add-in

Apriso has following built-in roles that have been pre-defined applicable to MPI cube:   

• Plant Manufacturing Analyst for MPI Lite
• Manufacturing Analyst for MPI

Manufacturing Analyst roles have access to content of all MPI intelligence packs. In Apriso, you can also define dedicated, separate roles that are available in MPI cube to have fine control on access to intelligence packs. Following is the table of the access rights of available roles: 

Apriso analytics roles are not enforced in the system by default. There is a dedicated switch in the "AnalyticsServices" section of Apriso CentralConfiguration.xml file. The key of the switch is "RequireRoles". Be default, the value is set to false. With the switch off and no analytics roles linked to Apriso user, SSAS role support functionality will be turned off in Apriso and MPI. You can enable it by setting the value to true and link analytics roles to Apriso user.