KB241190: How to activate Desktop for users to access all functionality available when connected to a Project in the Intelligence Server in MicroStrategy 10.4

Introduction
In Strategy Desktop 10, a new privilege called “Use Strategy Desktop” has been introduced allowing administrators to control whether or not users can connect to the Intelligence Server and log into a Project from Desktop. However, there are additional privileges that Users must be granted for them to be able to use all the functionality offered in Desktop when connected to the Intelligence Server, which includes:

• Download Dashboards
• Add an existing Cube Dataset from Server
• Add Project objects from the All Objects panel
• Upload Dashboards
• Share Dashboards with other Users through Strategy Web

 
What privileges to grant Desktop users for them to access each functionality?
The easiest way is to create a User Group that has the necessary privileges granted and then add your users to that group as needed.
 
Developer

1. Login to your Project Source as an administrator user, go to Administration and expand the User Manager.
2. Right Mouse click on a User or User Group and click Edit.
3. In the User Editor, go to Project Access.

 
Web

1. Login to your Project.
2. Click on the Strategy logo in the top left corner and then select Projects.
3. Click on Go to the Intelligence Server Administrator.
4. Click on the Intelligence Server icon and provide administrator credentials.
5. Click on User Manager then select Edit, to the right of a User or User Group and change to the Project Access tab.

Make sure the following privileges are granted for every functionality to be available:

 
What privileges should be revoked to prevent users from accessing certain functionality?
Although in most cases more than one privilege is needed to enable individual functionality. It is possible to revoke access to a specific functionality by revoking only one privilege. For example, some administrators may wish to grant their users the ability to download dashboards, but not to upload, or share dashboards. Please use the following table as reference to revoke access to individual functionality:

 
How do I grant the necessary privileges to use Strategy to a large number of users?
You can use Strategy Command Manager to run scripts that grant the necessary privileges to use Strategy Desktop in bulk to a large group of users. Please note that the ‘Use Desktop’ privilege is mandatory for all users should they want to use Strategy Desktop. You can assign users with a combination of the other privileges based on their user persona/profile.
Some Sample Command Manager outlines:

• Provide ‘Jon Snow’ the ability to connect to Intelligence Server via Strategy Desktop

GRANT USEMSTRDESKTOP TO USER "Jon Snow";

• Enable all users in ‘Managers’ group to use Strategy Desktop to download a dashboard from Strategy Intelligence Server

GRANT USEMSTRDESKTOP, WEBEXECUTEANALYSIS, EXPORTTOMSTRFILE TO GROUP "Managers";
 

• Enable an individual user ‘Jon Snow’ to use Strategy Desktop to import their own data and export a dashboard

 
GRANT USEMSTRDESKTOP, WEBEXECUTEANALYSIS, EXPORTTOMSTRFILE, USEOLAPSERVICES, WEBEXECUTECUBEREPORT TO USER "Jon Snow";
 
* Export Strategy File is also required to add an existing Cube dataset from server, so it is currently not possible to revoke users the ability to do this, while still allowing them to download dashboards, or vice-versa.
** Web modify the list of report objects is ignored due to a known limitation in Strategy Desktop 10 Early Adopter 2, which will be addressed in a subsequent release.