Remove Local Administrators SSAS Admin Access
Bradley Schacht is a Principal Program Manager on the Microsoft Fabric product team based in Saint Augustine, FL. Bradley is a former consultant, trainer, and has coauthored 6 SQL Server and Power BI books, most recently Learn Microsoft Fabric. As a member of the Microsoft Fabric product team, Bradley works directly with customers to solve some of their most complex data problems and helps shape the future of Microsoft Fabric. Bradley gives back to the community through speaking at events such as the SQLBits, Fabric Community Conference, PASS Community Data Summit, SQL Saturdays, Code Camps, and user groups across the country including locally at the Jacksonville SQL Server User Group (JSSUG). He is a contributor on SQLServerCentral.com and blogs on his personal site, BradleySchacht.com.
Recently while changing some production security around on a new server I needed to modify the SQL Server Analysis Services (SSAS) administrator group at the server level. This is a pretty easy process; log in, add or remove admins as necessary in the security section. However, by default any user who is a member of the local administrator group on the server will also be an administrator on the SSAS instance. Luckily there is an advanced property on the SSAS instance to change this and therefore remove the admin access. Just make sure there is someone set as an admin on the Security properties for SSAS before making this change otherwise get your installation media ready for a re-install! To remove admin access for users in the Local Administrators group:
- Launch SQL Server Management Studio
- Log onto the SSAS instance
- Go to the server properties (Right-Click on the server name and select Properties)
- Go to the General settings
- Check the box to Show Advanced (All) Properties
- Find Security BuiltinAdminsAreServerAdmins and change the value column to false.
