I'm hitting the following error when trying to display graphs with any of my PostgreSQL data sources.
No Data Set Access
Insufficient permissions to the underlying data set.
Access denied, please check your username and password.
Request is missing required authentication credential. Expected OAuth 2 access token, login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project.
I've whitelisted all Google Data Studio IPs on my PostgreSQL instance and I have no issue adding the corresponding data source to my Google Data Studio report (Add data > PostgreSQL > Authenticate (using a PostgreSQL user) > Add) but every time I try to add a graph I get this error message.
Does anyone know what is going wrong here?
I was able to solve the issue by granting all privileges on all tables to the user I use to authenticate on Google Data Studio. You need to run the following SQL query with a superuser (such as postgres):
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO my_user;
Another option to solve the issue is authenticating with a superuser (such as postgres).
In case some of you happen to be blocked by logs appearing on the charts, I recommend trying to add the data with a SELECT * FROM my_table in "CUSTOM QUERY" instead of using "TABLES". The logs are more explicit.
Related
I have data held in an Azure Data Lake Gen 2 storage container. I would like to provision this data for an existing report authored in Crystal Reports using SQL on demand.
During development I used my own Azure AD login via an ODBC connection on my local machine. I have access to the Synapse environment and also the data lake. This worked successfully and although slow, pulled all information required.
To deploy this solution correctly I need to remove my AAD creds and use a provisioned service principle. I have given the service principle to read from the data lake and also added the principle to the SQL database. Now I am stuck on how to use the principle to connect to Crystal Reports.
I have tried the same authentication type as with my AAD but now I am using a clientID not a email. So when the system prompts for connection details it wants you to sign in and does not accept the clientID.
Does anyone have any suggestions on how to connect to Crystal Reports using this way or any other way?
Also: My org does not want this user or app reg to have restricted permissions so therefore adding them to the RBAC "synapse admin" wont work.
Thanks
Tom
Found a way around this.
Create a service account user on Azure Portal. Head to Synapse Analytics and open blank SQL script to give the user minimal permissions.
*USE [master]*
CREATE LOGIN [serviceaccountsynapseuser#company.onmicrosoft.com] FROM EXTERNAL PROVIDER
GRANT CONNECT ANY DATABASE TO [serviceaccountsynapseuser#company.onmicrosoft.com]
GRANT SELECT ALL USER SECURABLES TO [serviceaccountsynapseuser#company.onmicrosoft.com]
*USE [Reporting] (Serverless SQL DB)*
CREATE USER [serviceaccountsynapseuser#company.onmicrosoft.com] FROM EXTERNAL PROVIDER
ALTER ROLE db_datareader ADD MEMBER [serviceaccountsynapseuser#company.onmicrosoft.com]
Finally head to the storage account and give the user storage blob reader role.
Whenever I try to open process definition in drools , Getting the Below Error
Invalid credentials to load data from remote server. Contact your system administrator.
I have given all permissions to role permission to user but still this error shows up.
While many details from your problem are not clear, here is the bottom line of this issue.
You are logging into the business-central with user 'nithish'. This user, will be used in the remote REST requests to your kie server instance. This means that user 'nithish' needs to exists on the kie-server side as well - otherwise kie-server will not recognise that user, thus authentication will fail. He needs to be created there with the same password and same roles as are present on the business-central side. I would advise at least
kie-server, rest-all,admin
roles.
The server you've installed your business central on has no access rights.
After deploying my Flask app, I get the following error when trying to access the MongoDB service:
OperationFailure: not authorized on [db_name] to execute command ...
I understand this is because the db user does not have read/write access to the database. But I'm not able to create a new user or change permissions. db.grantRolesToUser() returns "not a function" and addUser() gives me no permission... What can I do?
You need to do two things:
Bind the app to the service using cf bind-service (or the web portal)
In the app, parse the VCAP_SERVICES environment variable to get the credentials
This will ensure you app gets readWrite permissions on your database.
Here's a few helpful links in this regard:
https://docs.developer.swisscom.com/devguide/services/application-binding.html
https://docs.developer.swisscom.com/devguide/deploy-apps/environment-variable.html#VCAP-SERVICES
https://docs.developer.swisscom.com/service-offerings/mongodb.html
I am trying to limit user to see only one schema over XMLA.
For that i have done:
created separate role without full access check
Created separate role without full access check
In Applications tab checked only XMLA
In Schemas tab selected "Authorize Selected" and select only one schema
Created user with just created role
applied new user definitions
After that steps, when i connect via XMLA with just created users i still see all schemas.
What i am doing wrong?
One point that is important when using XMLA interface is to disable the 'anonymous' login. When doing XMLA if this mode is activate it is going to be used in priority.
To change this you need to modify icCube.xml and restart icCube Server. See more on online doc here.
I have few SSRS 2008 reports. Databases are CRM databases. I have created a group of 10 users. Each user has different permissions(user can see data of only those databases which he has access from CRM side security).
When user tried to see reports from his place(machine) every time he gets this error.
An error has occurred during report processing. (rsProcessingAborted)
Cannot create a connection to data source 'DB_NAME'. (rsErrorOpeningConnection)
Cannot open database "CRM_Database" requested by the login. The login failed. Login failed for user 'NTAUTHORITY\ANONYMOUS LOGON'.
I am using windows authentication. within the server reports are working fine. Outside the server we are getting this error.i got few suggestions that its a double hop issue.Solutions can be :
Use stored credential. (In my case I can't use because every user has access to different database. He can select database in reports whatever he has access to and he will get data only for that database.)
Kerberos setting.( I don't know how to do that when you have Windows 7 and SQL 2008 R2)
Help would be appreciated.
"NTAUTHORITY\ANONYMOUS LOGON" is the built in IIS account on your report server. The reports are being executed from this account which serves up the page to the user.
Update your Data Source to use "Connect using: Credentials supplied by the user running the report" and checking "Use as Windows credentials" (Kerberos), if their AD account is setup with the appropriate DB permissions on the SQL Server. when connecting to the Data Source. Windows integrated security works also if you are on the domain.
Since you need to pass the user's account to the DB for authentication using credentials stored securely on server (Stored Credential) will not work for the scenario you describe as every user will hit the database with the same credentials.