Attempting to view the 'Vault Store Usage Reporter' (usage.asp) using an account other than the Vault Service Account the error 'access denied' is returned

Article: 100018111
Last Published: 2014-08-11
Ratings: 1 0
Product(s): Enterprise Vault

Problem

Attempting to view the 'Vault Store Usage Reporter' (usage.asp) using an account other than the Vault Service Account the error 'access denied' is returned

Error Message

 The error 'access denied' occurs:

Access Denied is shown in all fields for usage.asp

Solution

By default, only the Vault Service Account (VSA) has the required permissions to view the Vault Store Usage Report, normally accessed from within the Vault Administration Console (VAC). In some instances it may be required that other personnel can view the report using Internet Explorer but due to security restrictions they cannot use the VSA login.

To provide access to a user, or group of users, some manual changes within SQL are required.

Creating the Login within SQL 2005 and above
  1. Log into the SQL server that is used by EV.
     
  2. Launch 'SQL Server Management Studio' and connect to the SQL server instance that hosts the EV Databases.
     
  3. Expand the Security object and then the Logins object; right-click Logins and choose "New Login..." as shown in Figure(1):

    • Showing the Security and Logins objects expanded
    • Figure(1)

  4. Click the 'Search...' button as circled in Figure (2)

    • New Login Search Button 
    • Figure(2)

  5. Enter the User or Group that needs access as shown in Figure (3)

    • Select User or Group
    • Figure(3)

  6. Once the user or group has been selected, verify the settings are the same as in Figure (4)

    • Confirming New Login settings
    • Figure(4)

  7. Click on the User Mapping page and select each database that represents a Vault Store within the EV infrastructure, generally only the Public Database role membership should be enabled, as shown in Figure (5)

    • Figure(5)

Grant the Permissions to the Login by running the following Script:

Within SQL Management Studio click 'New Query' on the Toolbar and run the following script.  Replace 'VSDatabaseName' with the Databasename of the Vault Store database and Username/Group with the username or group created above. generally this will be in the format "Domain\username":

USE VSDatabaseName
GRANT EXECUTE ON usps_Usage TO "Username/Group"
GRANT SELECT ON view_ListVaults TO "Username/Group"

Note: If accessing the Usage.asp page remotely it may be necessary to remove Windows Integrated Authentication from the Usage.asp page, use the steps provided in the following associated document:

"Access Denied" error when attempting to access the Usage.asp page (https://www.veritas.com/docs/000029049)


Was this content helpful?