SquaredUp uses the application pool identity account to retrieve data, not the account with which you log on to SquaredUp. By default, the application pool identity is set to NetworkService, however, this is configurable.
How to configure the Data Warehouse permissions manually
- Open Microsoft SQL Server Management Studio and connect to the SQL server hosting the SCOM Data Warehouse. You will need to connect as a SCOM Admin user who has the SQL sysadmin server role.
Check the application pool identity and make a note of the application pool identity account.
Identify the account you need to create by reviewing these options:
A. If the application pool identity is running as a custom account (i.e. not NetworkService) then create a login with the same username as your application pool identity account.
B. If the application pool is set to NetworkService and SquaredUp is installed on the same server as the Data Warehouse then add the relevant role for the NT AUTHORITY\NETWORK SERVICE account.
C. If the application pool is set to NetworkService and SquaredUp is not installed on the same server as the Data Warehouse then add the relevant role for the server's active directory computer account. This will be the name of the server with a $ on the end, for example,
- In SQL Server Management Studio browse to Security > Logins
- Right-click and click New Login...
In the text box asking for Login name enter the username you identified in step 3, i.e. either
NETWORK SERVICE, or
SquaredUpServer$, or your
Do not use the Search option in SQL Server Management Studio: Usernames entered in this format
(DOMAIN\machine$)will not succeed if you perform Check name. Manually type the name directly into the Name field, making sure to respect any capitalisation in the domain name.
- Click OK.
- Right-click on the newly created login (Security > Logins) and click Properties.
- Click on User Mapping on the left-hand side under Select a page.
- Tick the Data Warehouse database under Users mapped to this login (for example, OperationsManagerDW).
Tick OpsMgrReader under Database role membership at the bottom of the screen, as shown below:
- Click OK.
This has now configured your Data Warehouse permissions.
How to check the Data Warehouse permissions
In SQL Server Management Studio browse to Databases > OperationsManagerDW > Security > Users
Your SCOM Data Warehouse may have been given a name other than OperationsManagerDW.
Identify the account used for your login (see step 3 above) and ensure that a corresponding user account has been created. The user account must be the same as the login account created. For instance, if your login account is created with
learningzone\lz-squp$then your user account must also be
If a corresponding user account has not been created please repeat the steps 1-12 laid out in 'How to configure the Data Warehouse permissions manually'.
Right-click on the account, for example,
domain\SquaredUpServer$, and click Properties:
- In the Database role membership section, check that OpsMgrReader, apm_datareader and db_datareader are ticked.
- Click OK.
How to remove Data Warehouse Permissions
After uninstalling SquaredUp uncheck the OpsMgrReader database role.
Alternatively, if the login is only used by SquaredUp you can delete this login from the SQL server.