Configuring Webtrends Services User Accounts
Instructions for configuring Webtrends services user accounts.
During installation of the Webtrends Analytics master database, you have the option of specifying a single user account (Typical option) to control the Loader Service group, the UI Service group, and the Master Database service group, or one account for each of the service groups (Advanced option). Before you install Webtrends, you need to create Active directory users for Webtrends services to run under.
If your organization does not have strict security requirements for applications that access Microsoft SQL Server 2008, you can select Typical to use one user for all three service groups. This simplifies installation and maintenance.
You can also create two or three users for the service groups to run under, using the Advanced option. See Table 1: Database Permissions for a list of database permissions assigned to each group. This information may help you decide how many users to create.
When you install Visitor Data Mart, the Webtrends installer creates SQL Server 2008 users associated with each of the domain user accounts you create before installation. Each SQL Server 2008 user is given only the minimum permissions to allow the associated service group to perform its tasks. For information about the SQL Server 2008 permissions assigned to each service group, see Table 1: Database Permissions.
|Service Group||Application(s)||System (Master) Database||Configuration Database||Event Database|
|Loader Service||Event Database Loader Services||Server Roles: public||Server Roles: public, processadmin||Server Roles: public, processadmin, dbcreator|
|Database Permissions: data reader, data writer, exec sproc||Database Permissions: data reader, data writer, exec sproc||Database Permissions: db_owner or db_ddladmin, db_securityadmin, db_accessadmin, data reader, data writer, execsproc NOTE: [msdb] requires the sqlAgentUserRole|
|UI Service||Tomcat service (for administration UI), User Interface Service||Server Roles: public||Server Roles: public||Server Roles: public|
|Database Permissions: data reader, data writer, exec sproc||Database Permissions: data reader, data writer, exec sproc||Database Permissions: data reader, data writer, exec sproc|
|System Service||Scheduler Agent, System Monitor, Email Notification, Event Database Splitter, Log File Pre-processor||Server roles: public||Server roles: public||Server roles: none|
|Database Permissions: data reader, data writer, exec sproc||Database Permissions: none||Database Permissions: db_ddladmin|