Configure the unattended service account for PerformancePoint Services

 

Applies to: SharePoint Server 2010, PerformancePoint Services (SharePoint 2010)

The Unattended Service Account is an Active Directory account that is used for accessing PerformancePoint Services data sources. This account is used by PerformancePoint Services on behalf of authorized users to provide access to external data sources for the purposes of creating and using dashboards and other PerformancePoint Services content.

Note

The Unattended Service Account is a universal account that provides equal data access to all authorized users. If you need more fine-grained data access, you must configure per-user data access through Kerberos delegation. For more information, see Configure Kerberos authentication for SharePoint 2010 Products (white paper).

PerformancePoint Services uses Secure Store Service to store the unattended service account password. Before using the Unattended Service Account, make sure that Secure Store has been configured. For more information, see Plan the Secure Store Service (SharePoint Server 2010) and Configure the Secure Store Service (SharePoint Server 2010).

Video demonstration

This video shows the steps necessary to configure the unattended service account in PerformancePoint Services.

Running time: 6:46

Watch the video.  For an optimal viewing experience, download the video. Right-click the link, and then click Save Target As to download a copy. Clicking the link will open a .wmv file in the default video viewer for full-resolution viewing.

Configure the unattended service account for PerformancePoint Services

To configure the unattended service account for PerformancePoint Services

1. On the SharePoint Central Administration Web site, in the Application Management section, click Manage Service Applications, and then click the PerformancePoint Services service application.

2. On the Manage PerformancePoint Services page, click PerformancePoint Service Settings.

3. In the Unattended Service Account section, enter the user name and password for the account that you want to use as the unattended service account.

4. Click OK.

You will see the Secure Store Service name and the user name that represents the unattended service account.

Note

If an error occurs, the Secure Store Service key may not have been correctly generated or the key was not refreshed after you created a new key.

Once the unattended service account has been configured, you must grant that account access to your data sources:

• For SQL Server data, the account must have a SQL logon with db_datareader permissions on each database that you want to access.

• For SQL Server Analysis Services data, the account must have read access to the cube or an appropriate portion of the cube, depending on your needs.

• For Excel Services data, the account must have access to the Microsoft Excel workbook in a SharePoint document library.

• For data in a SharePoint list, the account must have read access to the list.

See Also

Concepts

Plan for PerformancePoint Services security (SharePoint Server 2010)