Distributed Architecture Considerations (Advanced) - Symantec IT ANALYTICS SOLUTION 7.0 SP2 - V1.0 Manual

Distributed architecture considerations (advanced)

8
Click Enable Visual Totals.
This step prevents the role from seeing the aggregate totals that are
independent of the configured filtering and restricts aggregations.
9 Click OK to save the role configuration.
Users in the configured role now see the results only for the computers that
have a Win32 system type across all cubes. This filtering is enforced across
all means of accessing the cubes, including dashboards, pivot tables, report,
and third-party applications.
We recommend that the SQL Server Analysis Services and SQL Server Reporting
Services instances that IT Analytics uses reside on the same host computer. You
can host these services on different computers in a highly distributed environment.
However, additional configuration might be necessary to ensure that
authentication is managed appropriately across all application tiers.
The SQL Server Reporting Services data sources that are configured on the
Connection Settings page use Windows integrated security by default. This feature
allows for granular control of the reports that a user has access to, and it also
enables filtering of the available cube data.
The delegation features and impersonation features that are available with
Windows integrated security can exist across multiple servers. In order for this
feature to work, the network environment in which IT Analytics Solution is
installed must be configured to use the Kerberos protocol. Without the Kerberos
protocol, Windows credentials are passed across only one computer connection
before they expire.
When the SQL Server Analysis Services and SQL Server Reporting Services are
hosted on the same computer, the credentials of the user that wants to access a
report through the Symantec Management Console are passed across only one
computer connection. The credentials are passed from the user s computer to the
computer that hosts both Analysis Services and Reporting Services. Delegating
credentials succeeds without enabling the Kerberos protocol.
Where SQL Server Analysis Services and SQL Server Reporting Services are hosted
on different computers, one additional connection is required to pass the
credentials of the user from the Reporting Server to the Analysis Server. Without
enabling Kerberos, the second connection is attempted as an anonymous user,
which fails authentication in a typical configuration.
Granting access to IT Analytics Solution
Distributed architecture considerations (advanced)
69