Setting Up Built-In Authorization

To set up built-in authorization:

Select the Use Built-in Authorization checkbox in the security manager.
Save built-in administrator (ADMIN schema owner) credentials using the PP.Util utility with the save_creds parameter and specify the DBOWNER credentials scope.

In Linux OS:

./PP.Util_start.sh /save_creds metabase_id login [password] DBOWNER

In Windows OS:

PP.Util.exe /save_creds metabase_id login [password] DBOWNER

Select and set up the authentication type that will be used together with built-in authorization:

Password authentication. It is used by default, additional settings are not necessary.
Domain/Integrated domain authentication. Make sure that the following conditions are satisfied:

Domain/integrated domain authentication is set up for the desktop application or web application based on the web server: Apache2, ASP.NET or Java.
Credentials of service user of security subsystem match with credentials of the ADMIN schema owner.
Only the ADMIN schema owner is contained at DBMS level.

NOTE. Simultaneous use of built-in authorization with domain or integrated domain authentication is available only when working with PostgreSQL DBMS.

After executing the operations the built-in authorization is set up together with the selected authentication type.

Features of simultaneous use of built-in authorization with password, domain, or integrated domain authentication:

Connection to domain users or groups in the security manager is executed at Foresight Analytics Platform level without creating and granting permissions at DBMS level, the Create Accounts dialog box is not displayed.
Updating permissions of domain users or groups in the security manager at DBMS level is unavailable.
Connection to database is executed under saved credentials of the ADMIN schema owner:

If in database properties the Automatic Connection and Use Login Credentials checkboxes are selected.
If in the Database Authorization dialog box the Use Login Credentials radio button is selected.

Granting permissions for database objects at DBMS level is unavailable, the Manage Rights on DBMS Objects checkbox in database properties is not displayed.

See also:

Foresight Analytics Platform Authentication