Best Practice for pcFinancials Security Setup
The Best Practice recommendation is to run Canvas Planner and pcFinancials on a dedicated server with SQL Server (MSSQL), Analysis Server (MSAS) and Internet Information Server (IIS) installed. In this recommended scenario the source database(s) will exist on another server and will be linked to the pcFinancials dedicated server.
Other setups are possible as well. For example it is possible to run IIS on a separate server. MSAS is also possible to run on a separate server. In a low budget scenario it is also possible to run everything on one server including the source database systems.
Anyhow, on this page we only describe the recommended setup.
All what is described on this page has to be done before the installation of Canvas Planner and pcFinancials.
Create an pcFinancials Service Account
Create a new domain account (pcFinancials Service Account), which has local administrator rights on the server where pcFinancials will be installed.
In this example:
- the domain is named DSPCanvas
- the pcFinancials Service account is named pcFinancials_Service
- that gives the name DSPCanvas\pcFinancials_Service
The pcFinancials_Service account needs read access to the source database on the source database server.
- login the source database server with local administrator right
- start SQL Server Database Engine
- expand Security
- expand Logins
- right click on the pcFinancials_Service account
- Properties
- User Mapping:
- tick the source database
Grant the pcFinancials Service Account access to SQL Server Database Engine
Setup the security in SQL Server Database Engine
(This is to add the pcFinancials_Service account, so it can access things in SQL)
- Connect to SQL Server Database Engine.
- Security → right click on Logins → New Login…
Grant the pcFinancials Service Account access to SQL Server Analysis Services
Setup the security in SQL Server Analysis Services
(This is to add the pcFinancials_Service account to SSAS so it can deploy and view cubes)
- Connect to SQL Server Analysis Services
- Right click on SQL Server Analysis Services → Properties → Security → Add…
Services run by the pcFinancials Service Account
The pcFinancials Service account needs to run 3 Services
- SQL Server
- SQL Server Analysis Services
- SQL Server Agent
Right click on each service → Properties → Log On tab
IIS
Check IIS: the default website & port number (OPTIONAL)
If you want to install CanvasPlanner against a different site & a different port number, you need to create a new site with a different port number
- Add Website…
- Give a Site name
- Locate a Physical path
Canvas Planner
When you run Canvas Planner: