In fact, Microsoft is recommending that the Monitoring Server SI account
be the same as the SharePoint SI account and that the SI account should only be
assigned to the IIS_WPG group on the machine on which Monitoring Server is
installed. Figure 8-2 shows this page of the Configuration Manager and has been set
to a domain user.
288 B u s i n e s s I n t e l l i g e n c e w i t h M i c r o s o f t O f f i c e P e r f o r m a n c e P o i n t S e r v e r 2 0 0 7
The reason that Microsoft is recommending that the SharePoint SI account be
the same as the Monitoring Server SI account is because the PerformancePoint
Server web parts will access data as the SharePoint application pool SI account. All
SharePoint data connections happen under the control of the SharePoint SI account.
The PerformancePoint SI account is only used to connect to data sources from the
Dashboard Designer. Note that any chosen user will have to be granted permissions
to any Analysis Services cubes that data is being retrieved from.
The next two screens ask for the SharePoint site and the SQL Server instance
on which to install the web parts and the Report Server viewer, respectively.
After entering these, the Configuration Manager validates all the entered data and
allows the administrator to complete the configuration. This process configures
Figure 8-2 Setting a specific user for the Monitoring Service SI account is preferred to
leaving the default of Network Service.
C h a p t e r 8 : P e r f o r m a n c e P o i n t D e p l o y m e n t a n d S e c u r i t y 289
the IIS application pool, grants permissions to the database and IIS as needed,
adds components to SharePoint and Reporting Services, and creates the relational
database to hold the Monitoring Server metadata, among other steps.
Pages:
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374