立即与支持人员聊天
与支持团队交流

Enterprise Reporter 3.5.1 - Installation and Deployment Guide

Product Overview Installation Considerations for Enterprise Reporter Installing and Configuring Enterprise Reporter Managing Your Enterprise Reporter Deployment Troubleshooting Issues with Enterprise Reporter Appendix: Database Content Wizard Appendix: Encryption Key Manager Appendix: Log Viewer

Security Groups in Enterprise Reporter

When installing Enterprise Reporter 3.5.1 for the first time, if you let Enterprise Reporter create the database and security groups, the security group type is automatically set to Domain Local.

If an earlier version of Enterprise Reporter was previously installed, or if the security groups were created manually, the existing security groups may not be Domain Local groups. You can determine the security group type chosen when Enterprise Reporter was originally deployed on the System | Information page.

If the existing groups are not Domain Local groups, during upgrade, you will be given the option to keep them or to configure new security group types (recommended).

The following table outlines each supported choice:

Table 21. Security Group Types
Security type
Location of group
Who you can add to the group

Domain Local (recommended)

Added to the domain Users OU

The groups are given the appropriate SQL roles.

A domain local group can have the following members: user accounts, groups with universal scope, and groups with global scope — all from any domain. If users are in multiple domains, this type of group is required.

Global

Added to the domain Users OU

The groups are given the appropriate SQL roles.

A domain global group can have the following members: accounts from the same domain and other groups with global scope from the same domain. If all users are in the same domain, this type of group may be used.

Your choice will affect the following options:

•
Determine where the groups will be created and what type of groups they are—Active Directory objects (Domain Local and Global groups).
•
Determine who in your environment can be added to the groups (and therefore who can access Enterprise Reporter).
•
The account being used to create the database will be added to the security groups, thus giving this account full access to Enterprise Reporter.
 
* 
NOTE: To create groups, the currently logged-in account must have appropriate rights for the type of groups you are creating. If you are creating Domain Local or Global groups, you must be able to add users to the domain Users OU, and add members to groups.

Role-Based Security in Enterprise Reporter

The data collected and reported by Enterprise Reporter can contain sensitive information about your environment. To ensure that only appropriate users can access this information, each console has role based security.

 
* 
NOTE: During installation, the logged-in user is added to the Reporter_Discovery_Admins group, the Reporter_Discovery_Nodes group, and the Reporter_Reporting_Admins group. The Enterprise Reporter server service account is added to the Reporter_Discovery_Admins group and Reporter_Discovery_Nodes group.
* 
NOTE: Each security group name may be customized during installation.
The security group names for your system are displayed on the Configuration Manager System | Information page.
 

To be able to open a console, you must be assigned to one of the security groups. Four security groups are created when the Enterprise Reporter server is installed, and four are associated with SQL roles:

 
Table 22. Security Group and SQL Role Permissions
Security Group
SQL Role
Permissions

Reporter_Discovery_Admins

Discovery_Admin_Role

(also known as discovery administrator)
•
Access to all functionality in the Configuration Manager

Reporter_Reporting_Operators

Reporting_Operator_Role

(also known as reporting user)
•
Access to reports that are in the Published Reports and My Reports.
•
Run published reports
•
Copy published reports to My Reports.
•
Create and edit reports in My Reports container
•
Export report definitions from Published Reports and My Reports
•
Import report definitions into My Reports
•
Manage the My Reports container (move, copy, create categories)
NOTE: Users is in the this group:
•
Can only edit or modify reports after they have been copied from Published Reports to My Reports.
•
Can only "Set parameters as default" if the report is in My Reports.
•
Cannot modify or schedule reports that are located in Published Reports.
To create a schedule and send a report to a location or through email, users need to copy the report from Published reports and place it into My Reports.

Reporter_Reporting_Admins

 

 

Reporting_Admin_Role

(also known as reporting administrator)
•
All reporting user functionality
•
Paste or import reports into the Published Reports container
•
Publish to Knowledge Portal
•
Run reports from the Report Library
•
Export report definitions and copy from the Report Library
•
View all reporting users’ schedules, edit the properties of the schedule, or delete it

Reporter_Discovery_Nodes

Discovery_Nodes_Role
•
Deployment of node
•
Upgrade of node
•
Access to all functionality on the Enterprise Reporter Node
To add a user or group to a security role
•
Determine if your security groups are domain groups by checking the System | Information page.
•
To add an account to the discovery administrator role, use native tools to add the user to the Reporter_Discovery_Admins group.
•
To add an account to the reporting administrator role, use native tools to add the user to the Reporter_Reporting_Admins group.
•
To add an account to the reporting user role, use native tools to add the user to the Reporter_Reporting_Operators group.
•
To add an account to the discovery node role, use native tools to add the user to the Reporter_Discovery_Nodes group.
For more information, see the Microsoft documentation for your operating system.

Managing Your Database Using the Database Wizard

By default, the Database Wizard is installed on the same computer where the server is installed. You can also install it on a separate computer if needed. For more information, see Installing the Components . Using the Database Wizard, you can:

•
Create a new database. This gives you the option to create a new database or to connect to an existing empty database. You may then select this database during subsequent server installations.
•
Select or Upgrade an Enterprise Reporter database. You can use this to change the database or server that you want to use, to change the type of authentication you are using, or to change the SQL credentials.
When you select a database, it is automatically upgraded if it is not the same version as the server.
* 
CAUTION: It is recommended that you back up your database and encryption key before upgrading it, or before changing to a different database, as this may trigger an upgrade. You cannot undo an upgrade once it has started.
•
Remove an Enterprise Reporter database. You can use this to remove an unused database from the SQL Server.
•
Change the SQL Server security mode. You can choose to change the acceptable method of authentication for the SQL Server.
•
Perform database maintenance. You can use this to perform consistency checks, reset identity columns or rebuild database indexes.

See also:

•
Using the Database Wizard to Create or Connect a Database
•
Upgrading a Database
•
Deleting a Database
•
Changing the Security Mode
•
Changing the Connection to the Enterprise Reporter Database

Using the Database Wizard to Create or Connect a Database

The Database Wizard is used to create or connect an Enterprise Reporter database. You can either create the database when the wizard is automatically launched after installing the Enterprise Reporter server, or launch the wizard as a stand-alone application.

* 
NOTE: The Database Wizard is installed with the Enterprise Reporter server by default.
To create a database using the Database Wizard
* 
NOTE: If you use the Database Wizard on the same computer as the Enterprise Reporter server, when the database creation is complete, the Enterprise Reporter server service is restarted, and the server will be connected to the new database. If you create the database on a different computer, you must change the database to which you are connected. See Changing the Connection to the Enterprise Reporter Database .
•
Click the Start menu, select All Programs | Quest | Enterprise Reporter | Database Wizard and click Next.
1
Choose Create New Database, and click Next.
2
Enter the target SQL Server instance.
You can either type the instance name or browse to it. If you browse, you will see all SQL Servers in your subnet that are configured to advertise their presence. If you do not see your server on the list, you must type the name.
3
Type a name for your database.
- OR -
Type the name of the existing empty database to be connected, or browse to it.
4
Select the preferred type of authentication to use to connect to the SQL Server and click Next.
Enterprise Reporter connects to the SQL Server using Windows authentication by default. If you want to connect using SQL credentials, enter them before clicking Next.
Enterprise Reporter validates the SQL Server and your right to create a database on the instance before you can proceed to the next step.
5
If necessary, adjust the initial database size or file paths, and click Next.
Use the Database Estimator tool for further information based on the types of collections being performed.
6
If required, enter the domain of the Enterprise Reporter server’s service account.
7
Enter the names for the security groups, and click Next.
Using the default group names is recommended.

For more information, see Security Groups in Enterprise Reporter .

8
Review the message box, and click OK to continue.
- OR -
Click Cancel to further modify the Security Group Names.
9
Optionally, accept the default to open Configuration Manager.
Once the database is created, you will use the Configuration Manager to enter the Enterprise Reporter licences and configure the collection of network information.
10
Click Finish to create the database.
A task progress dialog will be displayed as the database is created.
11
When creation is complete and successful, a notice to backup the encryption key is displayed. Click OK to accept the message and start the Encryption Key Manager.
* 
IMPORTANT: It is important to backup the encryption key. The Encryption Key Manager will automatically start on the Enterprise Reporter Server. Use the Export Key option to create a back up file of the encryption key. For more information, see Appendix: Encryption Key Manager .
- OR -
If errors were encountered during database creation, an error dialog box displays.

For help troubleshooting errors, see Database Configuration Issues .

12
Click Cancel.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级