|
User Task
|
Windows Permissions
|
|
Install/Upgrade
|
local administrator on the server
|
|
Portal Web Service - with full access
|
By default, the web application is run by the
ApplicationPoolIdentity system account, but this can be changed to
any account you wish to use. The account needs the following
permissions:
- db_datawriter on the database
- dbo on the database temporarily (only when making Integrator
templates Live (i.e. configuring ingestion of data from
other sources). This is not a regular occurrence.
|
|
Portal Web Service - with limited access
|
Optionally you can have an additional Portal used by users who are
only allowed to review reports and dashboards and create ad-hoc
reports but cannot save changes.
The account running the web
application needs the following permissions:
db_datareader on the database
|
|
Users accessing the Portal - capacity team user
|
Permission to access the Portal Web Service that has full
access:
Added to the list of users allowed to access the Portal using the
Authorization Rules under IIS.
|
|
Users accessing the Portal - low access “Portal reporting”
user
|
Permission to access the Portal Web Service that has limited
access:
Added to the list of users allowed to access the
Portal using the Authorization Rules under IIS.
|