Setup Kyubit Application User

Setup Service Account

The Kyubit BI platform requires a dedicated Windows user account to perform essential back-end operations, including Active Directory searches, internal metadata management, and facilitating connections to OLAP tools.

During the environment planning and setup phase, you must designate a 'User Name' and 'Password' for this account. This identity allows the web application pool to communicate securely with your SSAS reporting tools and the internal SQL Server database.

BI Service Account Setup Identity Format & Best Practices

Provide the account credentials using one of the following formats, ensuring the account has "Log on as a batch job" or "Log on as a service" rights if required by your local policy:

  • Domain\Username: Recommended for production environments where Windows Integrated Security is used across the domain.
  • MachineName\Username: Used for standalone server installations or workgroup configurations.

Configuring the BI Application User during setup

Kyubit Identity Management Service Account Dependencies

This account identity is critical for the stability of your OLAP reporting environment. It is primarily utilized in the following areas:

  • IIS Application Pool: Set as the 'Identity' for the Kyubit BI Application Pool to handle web requests.
  • Database Ownership: Granted db_owner permissions on the internal KyubitAnalysisDB.
  • Active Directory: Used to resolve users and groups when managing BI content permissions.

Note: If you change the password for this account in the future, you must update the identity in IIS and SQL Server manually or re-run the Kyubit configuration utility.

For more information on hardware prerequisites for this user's environment, please visit our BI Tools FAQ.