Jump to: navigation, search

Configuring Permissions

This section describes the permissions that must be set for the functional SpeechMiner domain user (SMUSER) and for users of SMART.

Configuring Permissions for UPlatform

SpeechMiner uses a domain user account as the credentials for all the registered SpeechMiner services. Your IT department must be able to create this account for you. The domain user must have assigned permissions on all machines on which the UPlatform service will run, as described below. The user account must be created and assigned the required permissions before you begin configuring SpeechMiner.

Important
In this guide, this functional user account is called SMUSER.

Groups

SMUSER must be added to the following groups:

  • Power Users
  • Performance Monitor Users (if this group exists on the machine)

Folder Properties

In the Properties of the following folders, assign permissions to SMUSER, as follows:

Important
Tab indicates the tab in the Properties dialog box in which the permission can be assigned.
Folder Tab Permission Comments
Genesys installation folder Security Modify Usually C:\Program Files (x86)\Genesys\Software
Genesys data folders Security Modify For example, C:\data - where the data\input and data\filtered folders are located
Genesys data folders Sharing Change For example, C:\data - where the data\input and data\filtered folders are located
C:\Program Files (x86)\Genesys\Software\utopy\product\WEB\App_Data Security Read/Write This is for the impersonation user specified in the web.config file.

Report Server

On the report server, assign the Content Manager role to SMUSER, as follows:

  1. On the database server, open a browser, and navigate to //<database server name>/reports. The SQL Server Reporting Services manager opens.
    Important
    If the Windows UAC (User Account Control) is active on the server, open the browser by right-clicking its icon and then selecting Run as administrator.


    Sm reportingpermissions.png


  2. Select the Folder Settings tab.
    Important
    If you cannot access this folder, because you are repeatedly asked for your credentials, and then the screen turns blank, do the following: In rsreportserver.config, remove the value RSWindowsNegotiate and ensure that RSWindowsNTLM is specified. (For more information about this problem, and some other solutions, see http://blogs.msdn.com/b/lukaszp/archive/2008/03/26/solving-the-reporting-services-login-issue-in-the-february-ctp-of-sql-server-2008.aspx)
    .
  3. If SMUSER is not on the list, click New Role Assignment and add it. If it is on the list, click Edit to edit the existing account settings.
  4. Select speechminer database > sme.
  5. In the Security tab, click New Role Assignment. The New Role Assignment tab opens.
  6. In Group or user name, enter the user name (SMUSER).
  7. Select the Content Manager checkbox.

    Sm permissions newrole.png


  8. Click OK. The Content Manager role is assigned to SMUSER.

Directories Used by ASP.NET

Give SMUSER access permissions to the IIS metabase and other directories used by ASP.NET. To do this, an administrator can run this command:

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -ga "{domain}\{user}"

Configuring Permissions for UConnector

A functional UConnector user should be assigned the permissions listed below. Note that you can use SMUSER for this purpose; it is not necessary to create a dedicated domain user for this.

  • Recording-system shared folder: Read permissions
  • SpeechMiner input folder: Read/write permissions

Configuring Permissions for SMART

Any user who will run SMART should have the following permissions:

Folder Permission Comments
SpeechMiner installation folder Read/write Usually C:\Program Files (x86)\Genesys\Software
Package Root Path Read/write The path configured in the Packages folders text box in the Sites and Machines section.
Nuance installation folder Read/write For example, C:\Program Files\Nuance


In addition, all SMART users should have permission to use .net encryption. To add this, an administrator can run the following command:

aspnet_regiis -pa "NetFrameworkConfigurationKey" "{domain}\{user}"

Configuring Permissions for the Web Server

Once you have installed the SpeechMiner web server, you should set the following permissions:

  • On the folder C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files, give Modify permissions to the domain user that SpeechMiner will impersonate (For the SMUSER, see Configuring Permissions for UPlatform).
  • Set read/write/modify permissions to the IIS user/group (IIS_IUSRS in Windows server 2008 and above) and the operational domain user (SMUSER) on the SpeechMiner installation folder.
  • Set read/write/modify permissions to the IIS user/group (IIS_IUSRS in Windows server 2008 and above) on the windows temp folder.

This page was last edited on August 12, 2014, at 12:22.
Comments or questions about this documentation? Contact us for support!