0

How to restrict access to shared folders (applicable for BI Office V5.0-V5.3)

This guide will help you to remove  the 'Everyone' permission from the shared folders and Limit access to a Security Group or to Specific Users.


For v5.2 and prior versions please skip to the instructions below.

To lock down the folder share called "WebUploads5" (Used by the IIS to upload Mash-Pit content)
(Located at C:\Program Files\Pyramid Analytics\BI Office 5\websites\pabio\upload)
The following action should be taken:

1.   Remove from the folder the share permissions “everyone”

2.   Add the user called “system” and give it full permissions.

To lock down the share folder called “uploads5” (Used as a temp folder to process the file into a cube and upload it to the Tabular model)
(C:\Program Files\Pyramid Analytics\BI Office 5\content)
The following action should be taken:

1.  Create a group and add the following users in it:

  • the user called “system”
  • those users you want to have access to the “uploads5” share folder , i.e. to be able to upload files to “MashPit”
  • The user* of the SQL tabular instance that you are using for “Mash-Pit”.

2.  Remove “everyone” from the shared permissions on the “uploads” folder share.

3.  Add the group to the share permissions and give it full permissions

*If the SQL tabular instance is running under a “local System” user then you will need to add the SQL server name to the group. (Add the Machine to the group) (Please note that you will have to restart the SQL services and possibly the server for the permissions to take affect)

If there are any permission errors when trying to upload files to “Mash-Pit”, then please see the checklist below in order of priority:

1.  Make sure that any users that were added to the group, have since logged on and off from their computers

2.  Restart the SSAS server (only applies to the shared “upload5”)

3.  Restart the Pyramid server(s) (The Machines)

____________________________________________________________________________________________________________________________________ 

NOTE : The below is applicable in v5.0 - V5.2.

From v5.3, the security logic has changed. We no longer impersonate the logged in user. Instead we use the Application Pool account. 
 

To lock down the folder share called "WebUploads" (Used by the IIS to upload Mash-Pit content)
(Located at C:\Program Files\Pyramid Analytics\BI Office 5\websites\pabio\upload)
The following action should be taken:

1.  Create a group and add the following users to it:

  • The Pyramid users, permitted to upload Mash content
  • The "Data source" user configured in the admin
  • The user of the SQL tabular instance that you are using for Data Modeler

 

2.  Remove "everyone" from the shared permissions on the “WebUploads” share

3.  Add the group to the share permissions and give it full permissions


To lock down the share folder called “uploads5” (Used as a temp folder to process the file into a cube and upload it to the Tabular model)
(C:\Program Files\Pyramid Analytics\BI Office 5\content)
The following action should be taken:

1.  Create a group and add the following users in it:

  • The Pyramid users, permitted to upload Mash content
  • The “Data source” user configured in the admin
  • The user* of the SQL tabular instance that you are using for “Mash-Pit”.

2.  Remove “everyone” from the shared permissions on the “uploads” folder share.

3.  Add the group to the share permissions and give it full permissions

 
*If the SQL tabular instance is running under a “local System” user then you will need to add the SQL server name to the group. (Add the Machine to the group) (Please note that you will have to restart the SQL services and possibly the server for the permissions to take affect)

If there are any permission errors when trying to upload files to “Mash-Pit”, then please see the checklist below in order of priority:

1.  Make sure that any users that were added to the group, have since logged on and off from their computers

2.  Restart the SSAS server (only applies to the shared “upload5”)

3.  Restart the Pyramid server(s) (The Machines)

Reply Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
Like Follow
  • 3 yrs agoLast active
  • 894Views
  • 1 Following