Deep Dive: Excel Services and PerformancePoint Services Administration and TroubleshootingKevin DonovanProgram Manager, Office BIMicrosoft Corporation
DBI401
=OR(B2, NOT(B2))
http://commons.wikimedia.org/
Session Objectives and Takeaways
OverviewCommon Setup and Configuration Errors for accessing data (and how to fix them)Demos
Where are we going today?
Common Concepts
1
Excel Services config and data
errors 2
PerformancePoint Services
3
Overview
External Data: Leveraging the Secure Store
The Secure Store
PPS
Excel
Services
Visio Services Access
Services
Oth
ers
• Why not the app pool identity?• Storing the credentials securely using the secure
store
Excel Services
Troubleshooting and Configuring
• Create and configure an Excel Services Service Application
• Show Trusted Location Configuration
Let’s get some context here
Trusted File Locations
“This workbook cannot be opened because it is not stored in an Excel Services Application trusted location.”
Ocurrs on workbook open.
Allow External Data
“The trusted location where the workbook is stored does not allow external data connections.”
“The data connection path in the workbook points to a file on the local drive or is an invalid URI.
Verify that the path to the data connection file in the workbook points to a data connection file in a Data Connection Library.”
???
Allow External Data
“The data connection path in the workbook points to a file on the local drive or is an invalid URI.”
Provider=MSOLAP.5;Persist Security Info=True;Initial Catalog=Microsoft_SQLServer_AnalysisServices;Data Source=$Embedded$;MDX Compatibility=1;Safety Options=2;ConnectTo=11.0;MDX Missing Member Mode=Error;Optimize Response=3;Cell Error Mode=TextValue
Remember PowerPivot cases!
Show an Untrusted Document
The Office Data Connection (ODC) File
“The following data connection file does not exist or you do not have permission to it:http://<server>/<site>/file.odc”
???
ORNo access
to this location or
the .odc file is gone.
The field is just plain
empty.
Trusted Data Connection Libraries and Providers
“The Data Connection File http://<server>/<site>/file.odc used in the workbook is not in a trusted location.”
“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”
Authentication Issues
Now what?
Data connectivity and refresh often comes down to how you have your authentication set up . . .
My workbook is in a trusted location
It allows for data connections
My data source locations are trusted
Authentication is the likely culprit . . .
Creating Workbook Connections
Excel Services authentication settings:
Windows Authentication (default)SSSNone
Client and Server Authentication Options
The Windows Authentication” Workbook Connection
Default connection to data sourcesUses the credentials of the Windows user executing the query.Works great for Excel client, but not so well for Excel Services.Needs Claims To Windows Token Service
Windows request
Windows response
Claims to Windows Token Service
“The data connection uses Windows Authentication and user credentials could not be delegated.”
WFEApp
Server
Data
Store
claims kerberos
STS C2WTS
ID from browser
Access to the Data Source
“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”
The dreaded Kerberos errors . . . “Unable to get a connection” “CalculationServer.Credentials” “CalculationServer.Interop.ConnectionInfoException”
BISM (and EffectiveUsername)
to the rescue!
“Access was denied by the external data source.”
Target Application Credentials
“An error occurred while accessing application id <TargetApplication> from Secure Store Service.”
“An error occurred during an attempt to establish a connection to the external data source.”
OR
Wrong password…
The “SSS” Workbook Connection
Must know the name of a Target ID in the Secure Store
Uses the credentials stored as part of the Tartget ID
Used for published Excel Services workbooks on SharePoint.
Add PowerPivot SSS Data Refresh account to SharePoint workbook library.
Refers to the same
thing
Configure the Secure StoreCreate a Target App IDConnect Using the SSS Option
The “SSS” Workbook Connection
Using SQL credentials in the secure store.
Client stuffServer stuff
The “None” Authentication Setting
Uses the unattended service account to log into the data source.
Uses the connection string to retrieve the data.
The “None” Authentication Setting
Did you forget to add a TargetApp ID in Excel Services?
“The data connection uses None as the external data authentication method and the Unattended Service Account has not been configured.”
Is the app pool account a member of the target app?
AND
Excel Services Works!
My workbook is in a trusted locationIt allows for data connectionsMy data source locations are trustedMy authentication types . . . authenticate
Almost there . . .
Common Concepts
1
Excel Services config and data
errors
2
PerformancePoint Services
3
• Enabling Site Collection Features• Creating a BI Center Site• Creating a PPS Chart with Custom Lists and Document
Libraries (adding your content types manually)
PerformancePoint Services
Common PerformancePoint Errors and Fixes
Unattended Service Acct Permissions
Per-User Auth
Item-Level Permissions have been
added/removed
Designer vs. Contributor in
Dashboard Designer
Common PerformancePoint Errors and Fixes
Feature ActivationAccess to content database for new app pools
PS> $w = Get-SPWebApplication(“web application name”)PS> $w.GrantAccessToProcessIdentity("<domain\user>")
B/R, import/export – breaking references across site collections. Only on perfectly mirrored sites.
Disabled “show details” and “decomposition tree” (Demo)
Common PerformancePoint Errors and Fixes
Troubleshooting Recap
Error Locations (Windows Logs Applications)Process Accounts
Web application app pool accountPerformancePoint app pool account
PermissionsSharePoint accounts and permission levels
Contributor = ability to saveDesigner = ability to publish
Dashboard Designer accounts (Windows account)
Starting the Service
Configure end-to-end dashboard with Excel Services and PeformancePoint Services
Related Content
Building Self-Service BI Applications Using PowerPivot (DBI301)
Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps (SQL Server 2012) (DBI304)
Find me anytime at [email protected]
Program Manager, Microsoft Business Intelligence
KevinDonovan
PerformancePoint Blog
@kp_donovan
Track Resources
http://technet.microsoft.com/en-us/library/ff829837.aspx (Kerberos Whitepaper)
http://blogs.msdn.com/b/performancepoint/ (PerformancePoint Svcs Blog)
http://blogs.office.com/b/microsoft-excel/archive/category/11361.aspx (Excel Blog)
Track Resources
@sqlserver@TechEd_NA#msTechEd
mvaMicrosoft Virtual Academy
SQL Server 2012 Eval Copy
Get Certified!
Hands-On Labs
Resources
Connect. Share. Discuss.
http://northamerica.msteched.com
Learning
Microsoft Certification & Training Resources
www.microsoft.com/learning
TechNet
Resources for IT Professionals
http://microsoft.com/technet
Resources for Developers
http://microsoft.com/msdn
Complete an evaluation on CommNet and enter to win!
MS Tag
Scan the Tagto evaluate thissession now onmyTechEd Mobile
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to
be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS
PRESENTATION.