Toad Intelligence Central 6.3 - Deployment Guide

Third-Party Connection to Intelligence Central

A Toad Intelligence Central user can create a MySQL connection to Toad Intelligence Central through a third-party tool, such as one of the following:

• Tableau
• MySQL command line interface
• MySQL Workbench

This connection can be used to query tables, views, snapshots and datasets stored in Toad Intelligence Central.

Requirements / Limitations

Connection

Create the MySQL connection.

MySQL database

Select the MySQL database where the object is stored. This is dependent on the application used to create the object.

Queries

Query tables, views, snapshots and datasets.

MySQL Views

You can use the following MySQL commands to verify the third party tool.

• SHOW [FULL] TABLES command
• DESC[RIBE] command
• EXPLAIN command
• SHOW [FULL] COLUMNS command
• SELECT query against information_schema.views
• SELECT query against information_schema.tables
  

Connecting to Toad Intelligence Central from Excel (2019 and later) file

To create the connection:

• Create a self-signed certificate or obtain a certificate from Certification Authority for Toad Intelligence Central (TIC) URL or IP address

• Install the certificate in Trusted Root Certification Authorities store on the server where Toad Intelligence Central (TIC) is installed

• Bind the certificate to port 8066 by running one of the following commands in elevated
  

  - If connecting to TIC via IP address use the following PowerShell command:
  netsh http add sslcert ipport={tic IP}:8066 certhash={certificate thumbprint} appid={00112233-4455-6677-8899-AABBCCDDEEFF}

  - If connecting to TIC via the domain name use the following PowerShell command:
  http add sslcert hostnameport={tic URL}:8066 certhash={certificate thumbprint} appid={00112233-4455-6677-8899-AABBCCDDEEFF} certstorename=MY

  
  

  Note: {tic IP} replace with IP address e.g., 127.0.0.1 {tic URL} replace with TIC URL e.g., ticserver.mydomain.com {certificate thumbprint} replace with certificate thumbprint, which can be viewed in Certificate Manager in Windows by opening the certificate, switching to the details tab, and copying the value for the Thumbprint property

  
  

• If using a self-signed certificate, it needs to be installed in Trusted Root Certification Authorities store on every client that needs to connect to TIC from an Excel file; alternative is to set up Domain Controller to distribute the certificate to all clients

• From TIC, select the desired object and note the name and database properties in the details panel

• From Excel, go to the Data tab and select Get Data | From Other Sources | From Web

• Type the URL as follows (replace text in bold with appropriate values) and press OK:
  https://{tic URL/IP}:8066/tic/v1/artifacts/`{database}`.`{name}`/content

  

   

• In the next dialog, select Windows or Basic authentication, depending on what authentication method is used to connect to TIC
  

• After this is done, data can be imported and refreshed on demand

Add New Users and Groups

New users and groups can be added to Toad Intelligence Central. Which user role is required before adding new users is dependent on how Intelligence Central is configured.

To enable/disable self-registration, specify who can add new users, and configure other registration parameters, see Configure New User Registration.

Use the following icons to identify the type of user or group wherever users/groups are displayed, for example the Users or Groups pages. Review the following descriptions.

Types of Users

Icon	Description
	Active Directory® Users To self register from a web browser, click Register as a new user at the login prompt. The computer you use to login to Toad Intelligence Central must be accessible to your Windows® domain. This option is visible only if your local configuration allows self registration via a web browser. To register new users post login, see Add Active Directory Users and Groups. Your local configuration may require login with an Administrator role to add Active Directory users. See Configure New User Registration.
	Intelligence Central Users To self register from a web browser, click Register as a new user at the login prompt. Deselect the option to Use my Active Directory details. Fill in your user details. The options in this procedure may not be visible or selectable, depending on your local configuration. Your local configuration may not allow self registration from a web browser or registration of new Intelligence Central users. Following login to Intelligence Central from a web browser, to add users, select Administration | Users | Add User | Create Intelligence Central user. The availability of these steps depends on your Intelligence Central configuration.

Types of Groups

Icon	Description
	Active Directory Groups Following login to Intelligence Central from a web browser, to add a group from Active Directory, select Administration | Groups | Add Group | Add Active Directory Group. See Add Active Directory Users and Groups. Your Intelligence Central configuration may require login with an Administrator role to add Active Directory groups. See Configure New User Registration.
	Intelligence Central Groups Any logged in user can create an Intelligence Central group. For more information, see Create Intelligence Central Groups.

Add Active Directory Users/Groups

Users with certain privileges can add new users and groups to Toad Intelligence Central by importing users/groups from Active Directory®. Which type of user (role) is allowed to add new users is dependent on how Intelligence Central is configured. See Configure New User Registration for more information.

To add Active Directory User or Group using the Web interface

1. Use a web browser to log in to Intelligence Central. For more information, see Open the Web Console.
2. Click Administration and then select either Users or Groups.
3. Then select Add User | Add Active Directory User or Add Group | Add Active Directory Group.
   • If the Authenticate to Active Directory dialog opens, enter the credentials for your Active Directory account (including the domain name) in order to access a list of domains and users. See Authenticate to Active Directory for more information.
4. In the Add Users and Groups from Active Directory dialog, select the users/groups to add to Intelligence Central. See Add from Active Directory for more information.

Requirements

1. The Toad Intelligence Central server host must be in a valid Windows® domain.
2. If the Windows domain of the Toad Intelligence Central host and the Windows domain of the user are different then a two-way trust relationship must exist between the Windows domains.

Known issues and Limitations

Users and groups imported from Active Directory are given the same name in Intelligence Central.

Review the following known issues and limitations.

Authenticate to Active Directory

Use the Authenticate to Active Directory dialog to enter your Active Directory credentials in order to access a list of domains and users when attempting to add Active Directory users (or groups) to Intelligence Central.

To authenticate to Active Directory

1. In the Authenticate dialog, enter the following information:

   Field	Description
   Domain	A domain in the Active Directory forest.
   Username	Your username to that domain.
   Password	Your password to that domain.

2. Remember these credentials on server for future Active Directory access and synchronization—Select this option to instruct Intelligence Central to do the following:

   • Automatically and regularly synchronize imported Active Directory users and groups. For more information, see Synchronize Active Directory.

   • Cache Active Directory user and group data on Toad Intelligence Central. This has the potential to improve performance of Toad Intelligence Central when looking up Active Directory users and groups.

   If you do not select this option, the list of imported users and groups might not be kept in sync with Active Directory.

   To view a list of domains configured for Active Directory synchronization, in the Web interface go to Administration | Server | Settings. Log in with Administrator role is required to view this information. You can also change the credentials used for synchronization from this page. See Synchronize Active Directory for more information.

3. Schedule AD synchronization. If you selected Remember these credentials..., you can schedule the Active Directory synchronization. Enter the scheduling details in the fields provided. After scheduling a synchronization, the scheduling information and status are displayed in Administration | Server | Settings.