Service account configuration
AX Server uses three Windows services to perform most of the application functions on the server: Analytics Exchange Service, Analytics Exchange Connector, and Analytics Exchange Database.
Service names
|
Display name of the service |
Service name |
|---|---|
|
Analytics Exchange Service |
TomEE |
|
Analytics Exchange Connector |
AXConnector |
|
Analytics Exchange Database (AX Server installations that use a PostgreSQL database only) |
ACL_AXDatabase |
Analytics Exchange Service
The Analytics Exchange Service is installed on the AX Server and each AX Engine Node you configure.
Analytics Exchange Service user account
To assign a user account to run the Analytics Exchange Service, you must do one of the following:
- select an existing domain account
- create a new domain account
Note
Using a local user account to run the TomEE service is not supported. These accounts do not have the appropriate privileges to run some ACL commands.
Directory permissions for service account
The user account you choose must have full access to the ACL directory.
If you specify a Data directory or Archive and restore data directory outside the ACL directory, then you must grant full permissions to these as well.
Note
The AX Server installer assigns the required local permissions on the server to run the service. However, the permissions must be configured manually if the folder is on a different server, or if the user account does not have rights to the specified folder by default.
User accounts for multiple instances of Analytics Exchange Service
If your installation has multiple instances of the Analytics Exchange Service running on different servers, you should create a domain account with the rights required to run the service and access AX Server data before you perform any installation.
During each installation, specify that account to run the Analytics Exchange Service.
User accounts for Analytics Exchange Service with Direct Link
If the machine hosting AX Server or an instance of AX Engine Node also has a Direct Link installation, the user account must have permission to run the following executables:
- saplogon.exe
- sapgui.exe
Note
Without permission to run these executables, analytics that include Direct Link commands fail. You can assign Full Control permissions to the folder containing the executables. By default, the executables are at C:\Program Files\SAP\FrontEnd\SAPgui.
Analytics Exchange Connector
The AX Server installer configures the Analytics Exchange Connector service to use the Local System account. It is recommended that you use this default configuration.
Analytics Exchange Database
The PostgreSQL setup wizard configures the Analytics Exchange Database service with the local permissions on the server required to run the service.
During the installation, you can:
- use an existing local user account on the server
- have the installer create a new local user account
- specify a domain account
By default, the group that the PostgreSQL user account is part of is granted access to the program that controls the database (pg_ctl.exe), however you may restrict access to this program to just the specific account that runs the database service.
Note
You cannot use the built-in Local System account to run the service because the database server must access network resources, which the Local System account does not permit.
The Analytics Exchange Database service is installed on the server where PostgreSQL is installed, and it is only present if you use PostgreSQL as the database server.
