Donnerstag, 20. Januar 2011 03:03
When I attempt to open the Management Dashboard the following error appears in the ULS log on one of the application servers.
The EXECUTE permission was denied on the object 'proc_FetchChunkFromDocStreams'
The PowerPivot unattended refresh account is a member of the db_owner role in the SharePoint_AdminContents db. The user attempting to open the dashboard has is a member of the sysadmins role on the db server.
Which account in the SP farm requires this access?
BTW: Excel Services data refresh is working fine. PowerPivot slices work within Excel workbooks. But the dashboard (in Central Administration) fails and prompts for authentication (which continues to fail even with a domain admins account).
Donnerstag, 20. Januar 2011 07:23
It appears that the Infrastructure Server Health webpart requires the ExcelServices service account to be a member of the db_owners database role in SharePoint_AdminContent_guid db (proc_FetchChunkFromDocStreams doesn't have EXEC rights through the WSS_Content_Application_Pools role).
Now just have to work out what permissions are required for the Workbook Activity Chart webpart...
Donnerstag, 20. Januar 2011 18:47
What's the user who browsing to the PowerPivot Management Dashboard page (in SharePoint's Central Administration application pge) permissions and role in SharePoint? Can't you see the Workbok Activity Chart at all?
You can have nice picture of the PowerPivot for SharePoint security architecture here: http://download.microsoft.com/download/C/8/4/C84E3771-E642-4BC1-9704-5ADAB434C5DD/PowerPivot%20Security%20Architecture.pdf
Mariano Teixeira Neto Analysis Services SQL Server BI Microsoft Corp.
Donnerstag, 20. Januar 2011 22:50
The user built the SP farm. They have Full Control, Limited Access. In Edit Permissions for the user, Limited Access is ticked but greyed out.
When the dashboard is opened, a challenge for credentials pops up. Re-entering credentials has no effect. Cancelling the popup results in a red cross when the Workbook Activity Chart is displayed.
In the ULS on the app server hosting the Central Admin app I can see starting to render Workbook Activity Chart followed immediately by finished rendering but not much else of interest. What should I be looking for? Will the errors be on one of the App Servers or WFE servers?
Dienstag, 28. Februar 2012 11:02Hi, Thanks for the tip! We were facing (almost) the same issues (using the Server Farm Account) - instead of prompt for credentials we were however just met with 'An error has occurred. Please try again'. For no obvious reason the Workbook Activity Chart has started working after some days 'in denial' :-) Taking that you by 'ExcelServices Service account' meant the 'Excel Services Application Pool Account' and adding the dbOwner role as suggested made the chart render as intended. After adding the dbOwner role we also were able to open the reports 'Server Health' and 'Workbook Activity'. Did you solve your problem? It seems like a bug that the auto-generated WSS_Content_Application_Pools not creates the needed rights thus creating a need/urge for adding dbOwner role to the Application Pool accounts? Kind regards
- Bearbeitet Erik Bo Dienstag, 28. Februar 2012 11:28