Install the Privilege Management Reporting Pack

Install the Reporting Pack on the SQL Server Reporting Services instance (or the single server if using a single box solution).

Pre-Installation Tasks

Accounts

Before starting the installation of the Reporting Pack components, we recommend that the following accounts be created. The installation steps in subsequent sections of this guide refer to these accounts.

Accounts Required for Installation

Name

Details

Account Type

Permissions / Rights

ReportWriter

Use this account to install the Reporting Pack

Windows account or SQL Authentication account

Windows permission - Local Administrator

SSRS site level role - System Administrator

ReportReader Used by the Reporting Pack reports to allow read access to the Privilege Management database

Windows account or SQL Authentication account

Requires Log On Locally rights on server hosting SSRS

SELECT and EXECUTE permissions are assigned during the installation process

DataAdmin

Used by the Reporting Pack reports to allow write access to the Privilege Management database to purge undesired data.

This account and product feature is optional - please see section 4.2 Installation for more information.

Windows account or SQL Authentication account

Requires Log On Locally rights on server hosting SSRS

SELECT and EXECUTE permissions are assigned during the installation process

Create the ReportWriter Account

To add a System Administrator role to the Reporting Services site:

  1. Browse to the SQL Server Reporting Services Report Manager URL. The URL is located in the Reporting Services Configuration Manager, under Report Manager URL.
  2. Click on Site Settings, and then select Security.
  3. Click Add group or user, and enter the DOMAIN\Username of an authorized account.
  4. Check the System Administrator box.

Create the ReportWriter Account on the Security tab in SQL Server Reporting Services.

  1. Click OK.

Run the Privilege Management Reporting Pack Installer

To install the Privilege Management Reporting Pack:

Privilege Management report pack installer wizard: welcome page

  1. Run the PrivilegeManagementReportingPack.exe installation package as a user with the Report Writer permissions.

 

  1. Click Next to continue. The License Agreement dialog box displays.
  1. After reading the license agreement, select I accept the terms in the license agreement and click Next to continue.

Privilege Management report pack installer wizard: database server settings.

  1. Enter your name and the name of your organization and click Next to continue. The Database Server dialog box displays.

 

  1. Enter the report server URL (the reports fail to upload if you enter an incorrect URL). Enter the database to use by the SQL Server Reporting Services instance.

SQL Server Reporting Services. Enter the report server URL for Privilege Management Reporting.

 

  1. If you are unsure of the correct Report Server URL to use, you can find it in the Reporting Services Configuration Manager under Web Service URL:

 

Privilege Management report pack installer wizard: reporting services authentication settings.

 

  1. Click Next to continue. The Reporting Services Authentication dialog box appears.
  2. Enter the ReportReader account as the account used to connect to the data source.

The ReportReader account is used by the Reporting Services to connect to the database instance when generating dashboards and reports. The account must be the same account that was entered during the Privilege Management Database Installer.

If Credentials stored locally in the report server is not selected, then any users authorized to access Privilege Management Reporting must have their account credentials added to the SsrsRole database role.

  1. Click Next to continue. The Reporting Services Admin Authentication dialog box appears.
    This feature is optional and may not be desirable in environments that need tight control over purging of audit data.
  2. The purpose of this report is to allow the purging (and subsequent exclusion) of applications from populating the database with unwanted data.

Privilege Management report pack installer wizard: services admin authentication settings.

  1. Use the DataAdmin account for this purpose.

 

  1. Click Next to continue. The Ready to Install the Program dialog box displays.
  2. Click Install to complete the installation.

For more information, please see the Privilege Management Reporting Dashboard Guide.