Enterprise Reporter 3.2.2 - Installation and Deployment Guide

Role Based Security in Enterprise Reporter

The data collected and reported on by Enterprise Reporter can contain sensitive information about your environment. To ensure that only appropriate users can access this information, each console has role based security.


	NOTE: During installation, the logged in user is added to the Reporter_Discovery_Admins group, the Reporter_Discovery_Nodes group, and the Reporter_Reporting_Admins group. The Enterprise Reporter server service account is added to the Reporter_Discovery_Admins group and Reporter_Discovery_Nodes group.


	NOTE: Each security group name may be customized during installation. The security group names for your system are displayed on the Configuration Manager System \| Information page.

In order to be able to open a console, the user must be assigned to one of the security groups. Four security groups are created when the Enterprise Reporter server is installed, and four are associated with SQL roles:

Table 16. Security Group and SQL Role Permissions

Security Group

SQL Role

Permissions

Reporter_Discovery_Admins

Discovery_Admin_Role

(also known as discovery administrator)

•

Access to all functionality in the Configuration Manager

Reporter_Reporting_Operators

Reporting_Operator_Role

(also known as reporting user)

•

Run published reports

•

Copy published reports to My Reports.

•

Create and edit reports in My Reports container

•

Export report definitions from Published Reports and My Reports

•

Import report definitions into My Reports

•

Manage the My Reports container (move, copy, create categories)

Reporter_Reporting_Admins

Reporting_Admin_Role

(also known as reporting administrator)

•

All reporting user functionality

•

Paste or import reports into the Published Reports container

•

Publish to Knowledge Portal

•

Run reports from the Report Library

•

Export report definitions and copy from the Report Library

•

View all reporting users’ schedules, edit the properties of the schedule, or delete it

Reporter_Discovery_Nodes

Discovery_Nodes_Role

•

Deployment of node

•

Upgrade of node

•

Access to all functionality on the Enterprise Reporter Node

To add a user or group to a security role

•

Determine if your security groups are domain groups by checking the System | Information page.

•

To add an account to the discovery administrator role, use system-provided tools to add the user to the Reporter_Discovery_Admins group.

•

To add an account to the reporting administrator role, use system-provided tools to add the user to the Reporter_Reporting_Admins group.

•

To add an account to the reporting user role, use system-provided tools to add the user to the Reporter_Reporting_Operators group.

•

To add an account to the discovery node role, use system-provided tools to add the user to the Reporter_Discovery_Nodes group.

For more information, see the Microsoft® documentation for your operating system.

Managing Your Database Using the Database Wizard

By default, the Database Wizard is installed on the same computer where the server is installed. You can also install it on a separate computer if needed. For more information, see Installing the Components . Using the Database Wizard, you can:

•

Create a new database. This gives you the option to create a new database or to connect to an existing empty database. You may then select this database during subsequent server installations.

•

Select or Upgrade an Enterprise Reporter database. You can use this to change the database or server that you want to use, to change the type of authentication you are using, or to change the SQL credentials.

When you select a database, it is automatically upgraded if it is not the same version as the server.


	CAUTION: It is recommended that you back up your database and encryption key before upgrading it, or before changing to a different database, as this may trigger an upgrade. You cannot undo an upgrade once it has started.

•

Remove an Enterprise Reporter database. You can use this to remove an unused database from the SQL Server®.

•

Change the SQL Server® security mode. You can choose to change the acceptable method of authentication for the SQL Server®.

•

Perform database maintenance. You can use this to perform consistency checks, reset identity columns or rebuild database indexes.

Topics:

•

Using the Database Wizard to Create or Connect a Database

•

Upgrading a Database

•

Deleting a Database

•

Changing the Security Mode

•

Changing the Connection to the Enterprise Reporter Database

Using the Database Wizard to Create or Connect a Database

The Database Wizard is used to create or connect an Enterprise Reporter database. You can either create the database when the wizard is automatically launched after installing the Enterprise Reporter server, or launch the wizard as a stand-alone application.


	NOTE: The Database Wizard is installed with the Enterprise Reporter server by default.

To create a database using the Database Wizard


	NOTE: If you use the Database Wizard on the same computer as the Enterprise Reporter server, when the database creation is complete, the Enterprise Reporter server service is restarted, and the server will be connected to the new database. If you create the database on a different computer, you must change the database to which you are connected. See Changing the Connection to the Enterprise Reporter Database .

•

Click the Start menu, and select All Programs|Quest|Enterprise Reporter|Database Wizard and click Next.

Choose Create New Database, and click Next.

Enter the target SQL Server® instance.

You can either type the instance name or browse to it. If you browse, you will see all SQL Servers® in your subnet that are configured to advertise their presence. If you do not see your server on the list, you must type the name.

Type a name for your database.

- OR -

Type the name of the existing empty database to be connected, or browse to it.

Select the preferred type of authentication to use to connect to the SQL Server®, and click Next.

Enterprise Reporter connects to the SQL Server® using Windows® authentication by default. If you want to connect using SQL credentials, enter them before clicking Next.

Enterprise Reporter validates the SQL Server® and your right to create a database on the instance before you can proceed to the next step.

If necessary, adjust the initial database size or file paths, and click Next.

Use the Database Estimator tool for further information based on the types of collections being performed.

If required, enter the domain of the Enterprise Reporter server’s service account.

Enter the names for the security groups, and click Next.

Using the default group names is recommended.

Technical Documentation.

For more information, see Security Groups in Enterprise Reporter .

Review the message box, and click OK to continue.

- OR -

Click Cancel to further modify the Security Group Names.

Optionally, accept the default to open Configuration Manager.

Once the database is created, you will use the Configuration Manager to enter the Enterprise Reporter licences and configure the collection of network information.

Click Finish to create the database.

A task progress dialog will be displayed as the database is created.

When creation is complete and successful, a notice to backup the encryption key is displayed. Click OK to accept the message and start the Encryption Key Manager.


	IMPORTANT: It is important to backup the encryption key. The Encryption Key Manager will automatically start on the Enterprise Reporter Server. Use the Export Key option to create a back up file of the encryption key. For more information, see Appendix: Encryption Key Manager .

- OR -

If errors were encountered during database creation, an error dialog box displays.

Technical Documentation.

For help troubleshooting errors, see Database Configuration Issues .

Click Cancel.

Upgrading a Database

The Enterprise Reporter database must be the same version as the Enterprise Reporter server. You can use the Database Wizard to upgrade your database outside of the installation process.

To upgrade an Enterprise Reporter database


	CAUTION: It is recommended that you back up your Enterprise Reporter database and encryption key before beginning this process. You cannot undo this operation once it has started.


	NOTE: Once an upgrade has started, all connections to the database will be closed and the database will be unavailable until the upgrade completes successfully.

If you are starting the Database Wizard from the Start menu, click the Start menu and select All Programs|Quest|Enterprise Reporter|Database Wizard and click Next.

- OR -

If the Database Wizard is already running, skip this step.

Choose Select/Upgrade Existing Database and click Next.

Enter the target SQL Server®.

You can either type the SQL Server® name or browse to it. If you browse, you will see all SQL Servers® in your subnet that are configured to advertise their presence. If you do not see your server on the list, you must type the name.

Confirm database name.

You can type a database name, or browse to find one. Enterprise Reporter validates that the database exists, and is a valid Enterprise Reporter database. If the Browse dialog box is empty, ensure the SQL Server® is correct. Or, try using different credentials, as only databases to which the current credentials have access are shown.

Confirm which type of authentication to use to connect to the SQL Server® and click Next.

Enterprise Reporter connects to the SQL Server® using Windows® authentication by default. If you want to connect using SQL credentials, enter them.

Confirm that you backed up the encryption key using the Encryption Key Manager, and then click Next.

If the database is from a previous version of Enterprise Reporter, the database automatically upgrades.

Confirm that you have created a backup of your database by selecting I understand and wish to continue, then click Next.

If the Domain Local security group type was not selected during the creation of the existing Enterprise Reporter Database, you will be asked to confirm that you wish to continue with the original security group type.

Using the Domain Local group type is recommended. For more information on security groups, see Security Groups in Enterprise Reporter .

If required, enter or browse to the domain of the Enterprise Reporter server’s service account.

Confirm or edit the names for the security groups and click Next.

Review the warning message and click OK to continue.

- OR -

Click Cancel to further modify the Security Group Types or the Security Group Names.

To complete the database upgrade, click Finish.

If errors occur during an upgrade, they are detailed at the end of the process. For more information, see Database Configuration Issues .

A task progress dialog is displayed during the upgrade process.

When the upgrade completes successfully, click OK to open the Encryption Key manager.

Select the Export Key option to create an encryption key backup file. For more information, see Exporting a Key File .

- OR -

Select the Import Key option to import an encryption key backup file. For more information, see Importing a Key File .

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Enterprise Reporter 3.2.2 - Installation and Deployment Guide

Role Based Security in Enterprise Reporter

Managing Your Database Using the Database Wizard

Using the Database Wizard to Create or Connect a Database

Upgrading a Database