Best Practice for pcFinancials Security Setup

The Best Practice recommendation is to run Canvas Planner and pcFinancials on a dedicated server with SQL Server (MSSQL), Analysis Server (MSAS) and Internet Information Server (IIS) installed. In this recommended scenario the source database(s) will exist on another server and will be linked to the pcFinancials dedicated server.

Other setups are possible as well. For example it is possible to run IIS on a separate server. MSAS is also possible to run on a separate server. In a low budget scenario it is also possible to run everything on one server including the source database systems.

Anyhow, on this page we only describe the recommended setup.

All what is described on this page has to be done before the installation of Canvas Planner and pcFinancials.

Create a new domain account (pcFinancials Service Account), which has local administrator rights on the server where pcFinancials will be installed.

In this example:

• the domain is named DSPCanvas
• the pcFinancials Service account is named pcFinancials_Service
• that gives the name DSPCanvas\pcFinancials_Service

The pcFinancials_Service account needs read access to the source database on the source database server.

1. login the source database server with local administrator right
2. start SQL Server Database Engine
3. expand Security
4. expand Logins
5. right click on the pcFinancials_Service account
6. Properties
7. User Mapping:
   • tick the source database
   • grant the db_datareader access
     
     In this example, the source database name is EAS

Setup the security in SQL Server Database Engine
(This is to add the pcFinancials_Service account, so it can access things in SQL)

• Connect to SQL Server Database Engine.
• Security → right click on Logins → New Login…
• In General, Use Search… to find the pcFinancials_Service account.
  
• In Server Roles, assign sysadmin → OK.
  
• You can find pcFinancials_Service account is added in Logins now.
  

Setup the security in SQL Server Analysis Services
(This is to add the pcFinancials_Service account to SSAS so it can deploy and view cubes)

• Connect to SQL Server Analysis Services
• Right click on SQL Server Analysis Services → Properties → Security → Add…
• Add pcFinancials_Service account in Security
  

The pcFinancials Service account needs to run 3 Services

• SQL Server
• SQL Server Analysis Services
• SQL Server Agent

Right click on each service → Properties → Log On tab

Check IIS: the default website & port number (OPTIONAL)
If you want to install CanvasPlanner against a different site & a different port number, you need to create a new site with a different port number

• Add Website…
• Give a Site name
• Locate a Physical path
• Put a Port number that is available → OK
  

When you run Canvas Planner:

1. Make sure you type the right web site name(Site name) if you would like to change your web site
   
2. Make sure both login should be DSPCanvas\pcFinancials_Service
   

Later when you run pcFinancials → Customer Metadata step, make sure to put pcFinancials_Service account in the AdminUser field