Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Enterprise Reporter 3.5.1 - Installation and Deployment Guide

Table of Contents

Product Overview

Introducing Quest® Enterprise Reporter Key Features of Enterprise Reporter Enterprise Reporter Components

Enterprise Reporter Architecture

Installation Considerations for Enterprise Reporter

Before You Install Enterprise Reporter Enterprise Reporter server and database considerations

Failover recovery using SQL clusters

System Requirements Overview of Enterprise Reporter communications and required credentials

Node credential and alternate credential details for on-premises discoveries Detailed permissions for Enterprise Reporter discoveries Permissions for Enterprise Reporter discoveries on NAS devices Permissions for Enterprise Reporter tenant applications Minimum permissions for installing Enterprise Reporter Minimum permissions for installing Enterprise Reporter Port Requirements

Database Requirements

Configuring the Database and Security Groups

Installing and Configuring Enterprise Reporter

Installing Enterprise Reporter

Installing the Components

Installing and Configuring Individual Components

Installing and Configuring the Configuration Manager Installing and Configuring the Report Manager Installing and Configuring the Database Wizard Installing and Configuring the Log Viewer Installing and Configuring the Encryption Key Manager Creating a Database Prior to Enterprise Reporter Server Installation Installing and Configuring SSRS Installing and Configuring IT Security Search

Upgrading Enterprise Reporter

Preparing to Upgrade Enterprise Reporter Upgrading Enterprise Reporter Components Upgrading Enterprise Reporter Nodes Upgrading Manually-Configured Enterprise Reporter Nodes After Upgrading Enterprise Reporter

Licensing Enterprise Reporter

Activating or Updating Your License

Security Groups in Enterprise Reporter Role-Based Security in Enterprise Reporter Managing Your Database Using the Database Wizard

Using the Database Wizard to Create or Connect a Database Upgrading a Database Deleting a Database Changing the Security Mode Changing the Connection to the Enterprise Reporter Database Performing Database Maintenance

Managing Your Enterprise Reporter Deployment

Optimizing Enterprise Reporter Enterprise Reporter server and database considerations

Failover recovery using SQL clusters

Cluster Deployment Considerations

Consider the Data to Collect Before Deploying Nodes Fine Tune Each Cluster and Node Optimize Node Setup Plan Credential Use

Logged-In User Details Understanding Credentials Using Scenarios

Effectively Deploy Remote Nodes

Deploying a Node to a Trusted Domain

Optimize Data Transfer

Discovery Considerations

Divide Discovery Targets According to Cluster Structure Collect Only the Data Needed Plan Discovery and Reporting Schedules Optimize Nested Group Membership Collection Optimize Nested Group Membership Collection for Azure and Microsoft 365 Discoveries

Discovery Permission Requirements

Detailed permissions for Enterprise Reporter discoveries Permissions for Enterprise Reporter discoveries on NAS devices Permissions for Enterprise Reporter tenant applications IDG Managing Your Deployment.4.25.html

Troubleshooting Issues with Enterprise Reporter

Troubleshooting Installation Issues

Connecting to a SQL Server Issues with Multi-Domain Controller Environments

Problems Opening the Consoles Database Configuration Issues Troubleshooting connectivity issues

Restoring a connection to the Enterprise Reporter Server Restoring a connection to the Enterprise Reporter database Troubleshooting Connection Timeouts

Troubleshooting credential change failures Resolving Issues in the Configuration Manager

Node Deployment Issues Dealing with unassociated nodes Problems deleting a node Creating a Node Debug Log File

Data Collection Issues

Troubleshooting features in Enterprise Reporter

Exporting logs from the Configuration Manager Viewing information about your Enterprise Reporter configuration Viewing errors and statistics for tasks

Moving the Enterprise Reporter database Disaster Recovery

Backing up Enterprise Reporter Deploying Enterprise Reporter to another computer after a disaster Checking the Enterprise Reporter configuration after recovery

Appendix: Database Content Wizard

Software Requirements Starting and Configuring the Enterprise Reporter Database Content Wizard Transferring an Enterprise Reporter Database Backing Up an Enterprise Reporter Database Restoring an Enterprise Reporter Database Cleaning an Enterprise Reporter Database Merging Two Enterprise Reporter Databases Running Custom Enterprise Reporter Scripts PowerShell cmdlets

Requirements Database Content Wizard cmdlets Loading the Database Content Wizard cmdlet Backing Up An Enterprise Reporter Database Cleaning an Enterprise Reporter Database Merging Two Enterprise Reporter Databases Restoring an Enterprise Reporter Database Transferring an Enterprise Reporter Database

Appendix: Encryption Key Manager

Starting the Encryption Key Manager Generating a key file Importing a key file Exporting a key file Resetting credentials

Appendix: Log Viewer

Starting the Enterprise Reporter Log Viewer Finding and opening log files Viewing and searching log file entries Filtering log file entries

Permissions for Enterprise Reporter tenant applications

Enterprise Reporter requires Azure applications for the collection of Azure and Microsoft 365 objects and attributes. These applications must be registered in the Azure portal and consent must be granted for delegated permissions. To manage tenant applications used by Enterprise Reporter, you use the Configuration | Application Tenant Management option.

Azure Active Directory application permissions

For the Azure Active Directory discovery, the Exchange Online discovery, and the collection of nested group members for the OneDrive, Exchange Online, and Azure Resource discovery, an application with a name that begins with “Quest Enterprise Reporter Azure Discovery” is created. To create this application in your tenant, you must specify an account with administrative access to create applications. The account must have the Global Administrator role to be able to create and consent to the application.

Once created, the application must also be delegated permissions and an administrator must consent to the application’s permissions using the Microsoft consent wizard. For the Enterprise Reporter Azure discovery application, the following permissions are required:

Table 37. Required permissions
API Name	Permission	Permission Description	Type
Microsoft Graph	User.ReadBasic.All	Read all users' basic profiles	Delegated
Microsoft Graph	Directory.AccessAsUser.All	Access directory as the signed in user	Delegated
Microsoft Graph	Directory.Read.All	Read directory data	Delegated
Microsoft Graph	Group.Read.All	Read all groups
Microsoft Graph	IdentityRiskyUser.Read.All	Read identity risky user information	Delegated
Microsoft Graph	SecurityEvents.Read.All	Read your organization's security events	Delegated
Microsoft Graph	User.Read.All	Read all users' full profiles	Delegated
Microsoft Graph	Reports.Read.All	Read all usage reports	Delegated
Microsoft Graph	UserAuthenticationMethod.Read.All	Read all users' authentication methods	Delegated

Collecting user activity information

If you want to collect details about Microsoft 365 user activity, such as which licenses are assigned to a user and dates when a user last used a licensed service, the following delegated permission is required:

•

Microsoft Graph: Read all usage reports

Also, you must clear the Microsoft default setting that anonymizes the user-level data. To include user activity data in the Enterprise Reporter reports, do the following steps:

1

Open the Microsoft 365 admin center.

2

Navigate to Settings | Org Settings | Services.

3

Select Reports.

4

Clear the Display concealed user, group, and site names in all reports check box.

For more information, see https://learn.microsoft.com/en-US/microsoft-365/troubleshoot/miscellaneous/reports-show-anonymous-user-name

OneDrive application permissions

For the OneDrive discovery, an application with a name that begins with “Quest Enterprise Reporter OneDrive Discovery” is created. To create this application in your tenant, you must specify an account with administrative access to create applications. The account must have the Global Administrator role to be able to create and consent to the application.

Once created, the application must also be delegated permissions and an administrator must consent to the application’s permissions using the Microsoft consent wizard. For the Quest Enterprise Reporter OneDrive Discovery application, the following permissions are required:

Table 38. Required permissions
API Name	Permission	Permission Description	Type
Microsoft Graph	Directory.Read.All	Read directory data	Delegated
Microsoft Graph	Files.Read.All	Read all files that user can access	Delegated
Microsoft Graph	Sites.FullControl.All	Have full control of all site collections	Delegated
Microsoft Graph	Directory.AccessAsUser.All	Access directory as the signed in user	Delegated
Office 365 SharePoint Online	MyFiles.Read	Read user files	Delegated

Azure Resource application permissions

For the Azure Resource discovery, an application with a name that begins with “Quest Enterprise Reporter Azure Resource Discovery” is created. To create this application in your tenant, you must specify an account with administrative access to create applications. The account must have the Global Administrator role to be able to create and consent to the application.

Once created, the application must also be delegated permissions and an administrator must consent to the application’s permissions using the Microsoft consent wizard. For the Enterprise Reporter Azure Resource discovery application, the following permissions are required:

Table 39. Required permissions
API Name	Permission	Permission Description	Type
Microsoft Graph	User.ReadBasic.All	Read all users' basic profiles	Delegated
Microsoft Graph	Directory.AccessAsUser.All	Access directory as the signed in user	Delegated
Windows Azure Service Management API	user_impersonation	Access Azure Service Management as organization users	Delegated

Microsoft Teams application permissions

For the Microsoft Teams discovery, an application with a name that begins with “Quest Enterprise Reporter Microsoft Teams Discovery” is created. To create this application in your tenant, you must specify an account with administrative access to create applications. The account must have the Global Administrator role to be able to create and consent to the application.

Once created, the application must also be delegated permissions and an administrator must consent to the application’s permissions using the Microsoft consent wizard. For the Quest Enterprise Reporter Microsoft Teams Discovery application, the following permissions are required:

Table 40. Required permissions
API Name	Permission	Permission Description	Type
Microsoft Graph	Directory.Read.All	Read directory data	Delegated
Microsoft Graph	User.ReadBasic.All	Read all users' basic profiles	Delegated
Microsoft Graph	Files.Read	Read user files	Delegated
Microsoft Graph	Sites.FullControl.All	Have full control of all site collections	Delegated
Microsoft Graph	Directory.AccessAsUser.All	Access directory as the signed in user	Delegated
Microsoft Graph	Group.Read.All	Read all groups	Delegated
Office 365 SharePoint Online	MyFiles.Read	Read user files	Delegated

SharePoint Online application permissions

For the SharePoint Online discovery, an application with a name that begins with “Quest Enterprise Reporter SharePoint Online Discovery” is created. To create this application in your tenant, you must specify an account with administrative access to create applications. The account must have the Global Administrator role to be able to create and consent to the application.

Once created, the application must also be delegated permissions and an administrator must consent to the application’s permissions using the Microsoft consent wizard. For the Quest Enterprise Reporter SharePoint Online Discovery application, the following permissions are required:

Table 41. Required permissions
API Name	Permission	Permission Description	Type
Microsoft Graph	Directory.Read.All	Read directory data	Delegated
Microsoft Graph	Sites.FullControl.All	Have full control of all site collections	Delegated

IDG Managing Your Deployment.4.25.html

Troubleshooting Issues with Enterprise Reporter

Troubleshooting Issues with
Enterprise Reporter

•

Troubleshooting Installation Issues

•

Problems Opening the Consoles

•

Database Configuration Issues

•

Troubleshooting connectivity issues

•

Troubleshooting credential change failures

•

Resolving Issues in the Configuration Manager

•

Troubleshooting features in Enterprise Reporter

•

Moving the Enterprise Reporter database

•

Disaster Recovery

Troubleshooting Installation Issues

Although the installation should proceed smoothly if proper credentials are used, there are some environmental and security issues to consider.

•

Connecting to a SQL Server

•

Issues with Multi-Domain Controller Environments

•

Restoring a connection to the Enterprise Reporter Server

•

Database Configuration Issues

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center