Configuring Permissions

This section describes the permissions that must be set for the functional SpeechMiner domain user (SMUSER) and for users of SMART.

Configuring Permissions for UPlatform

SpeechMiner uses a domain user account as the credentials for all the registered SpeechMiner services. Your IT department must be able to create this account for you. The domain user must have assigned permissions on all machines on which the UPlatform service will run, as described below. The user account must be created and assigned the required permissions before you begin configuring SpeechMiner.

Important

In this guide, this functional user account is called SMUSER.

Groups

SMUSER must be added to the following groups:

• Power Users
• Performance Monitor Users (if this group exists on the machine)

Folder Properties

In the Properties of the following folders, assign permissions to SMUSER, as follows:

Important

Tab indicates the tab in the Properties dialog box in which the permission can be assigned.

Folder	Tab	Permission	Comments
Genesys installation folder	Security	Modify	Usually C:\Program Files (x86)\Genesys\Software
Genesys data folders	Security	Modify	For example, C:\data - where the data\input and data\filtered folders are located
Genesys data folders	Sharing	Change	For example, C:\data - where the data\input and data\filtered folders are located
C:\Program Files (x86)\Genesys\Software\utopy\product\WEB\App_Data	Security	Read/Write	This is for the impersonation user specified in the web.config file.

Report Server

On the report server, assign the Content Manager role to SMUSER, as follows:

1. On the database server, open a browser, and navigate to //<database server name>/reports. The SQL Server Reporting Services manager opens.
   Important

   If the Windows UAC (User Account Control) is active on the server, open the browser by right-clicking its icon and then selecting Run as administrator.
   
   
   



2. Select the Folder Settings tab.
   Important

   If you cannot access this folder, because you are repeatedly asked for your credentials, and then the screen turns blank, do the following: In rsreportserver.config, remove the value RSWindowsNegotiate and ensure that RSWindowsNTLM is specified. (For more information about this problem, and some other solutions, see http://blogs.msdn.com/b/lukaszp/archive/2008/03/26/solving-the-reporting-services-login-issue-in-the-february-ctp-of-sql-server-2008.aspx)
   .
3. If SMUSER is not on the list, click New Role Assignment and add it. If it is on the list, click Edit to edit the existing account settings.
4. Select speechminer database > sme.
5. In the Security tab, click New Role Assignment. The New Role Assignment tab opens.
6. In Group or user name, enter the user name (SMUSER).
7. Select the Content Manager checkbox.
   
   



8. Click OK. The Content Manager role is assigned to SMUSER.

Directories Used by ASP.NET

Give SMUSER access permissions to the IIS metabase and other directories used by ASP.NET. To do this, an administrator can run this command:

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -ga "{domain}\{user}"

Configuring Permissions for UConnector

A functional UConnector user should be assigned the permissions listed below. Note that you can use SMUSER for this purpose; it is not necessary to create a dedicated domain user for this.

• Recording-system shared folder: Read permissions
• SpeechMiner input folder: Read/write permissions

Configuring Permissions for SMART

Any user who will run SMART should have the following permissions:

Folder	Permission	Comments
SpeechMiner installation folder	Read/write	Usually C:\Program Files (x86)\Genesys\Software
Package Root Path	Read/write	The path configured in the Packages folders text box in the Sites and Machines section.
Nuance installation folder	Read/write	For example, C:\Program Files\Nuance

In addition, all SMART users should have permission to use .net encryption. To add this, an administrator can run the following command:

aspnet_regiis -pa "NetFrameworkConfigurationKey" "{domain}\{user}"

Configuring Permissions for the Web Server

Once you have installed the SpeechMiner web server, you should set the following permissions:

• On the folder C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files, give Modify permissions to the domain user that SpeechMiner will impersonate (For the SMUSER, see Configuring Permissions for UPlatform).
• Set read/write/modify permissions to the IIS user/group (IIS_IUSRS in Windows server 2008 and above) and the operational domain user (SMUSER) on the SpeechMiner installation folder.
• Set read/write/modify permissions to the IIS user/group (IIS_IUSRS in Windows server 2008 and above) on the windows temp folder.