User accounts and permissions needed to install and configure Project Server and related components (325843)

SUMMARY

This article discusses the user accounts and permissions that you must have to install, configure, and connect to Microsoft Project Server, Microsoft SQL Server 2000 Analysis Services, and Microsoft SharePoint Team Services.

Microsoft Project Server

To install Microsoft Project Server, you must have two SQL Server user accounts to connect to an existing Microsoft Project Server database, or one SQL Server or Microsoft Windows user account to create a new database.

If you are connecting to an existing database, the first user account must be a member of the MSProjectServerRole role in the Microsoft Project Server database. The second account must be a member of the MSProjectUserRole in the Microsoft Project Server database. If you are creating a new database, the user account must have the correct permissions to create databases and user accounts.

The minimum requirements to create the Microsoft Project Server database is a SQL Server or Windows user account that is a member of the following database roles: To create a new SQL Server login user account (if you are using SQL Server Authentication), follow these steps:

1. Click Start, point to Programs, point to Microsoft SQL Server, and then click Enterprise Manager.
2. Expand Microsoft SQL Servers, expand SQL Server Group, expand ServerName (where ServerName is the name of the server), and then expand Security.
3. Right-click Logins, and then click New Login.
4. Click the General tab.
5. Type a name for the new login in the Name box. For example, type Prjsrvuser.
6. Click SQL Server Authentication, and then type a password in the Password box.
7. Click the Server Roles tab.
8. Click to select the Security Administrators and Database Creators check boxes, and then click OK.
9. Quit SQL Server Enterprise Manager.

NOTE: If you are using an existing user account, verify that the user account is a member of the Security Administrators (securityadmin) and Database Creators (dbcreator) database roles.

SQL Server Analysis Services

To install SQL Server Analysis Services, you need a Windows user account that is a member of the On-Line Analytical Processing (OLAP) Administrators group on the computer that is running Analysis Services.

To add your Windows user account to the OLAP Administrators group on the computer that is running Analysis Services, follow these steps:

1. Click Start, point to Programs, point to Administrative Tools, and then click Computer Management.
2. Expand System Tools, expand Local Users and Groups, and then click Groups.
3. In the right-pane, double-click OLAP Administrators.
4. Click Add.
5. Select your Windows user account in the Name list, and then click Add. Or, type your Windows user account name, and then click Check Names to verify the name.
6. Click OK, verify that the user account that you added is displayed in the Members list, click OK, and then quit Computer Management.

SharePoint Team Services

The following are the user account and permissions requirements for installing SharePoint Team Services.

Using the SharePoint Configuration Wizard (Stswiz.exe)

To install SharePoint Team Services by using the SharePoint Configuration Wizard, you need a SQL Server user account that is a member of the System Administrators (sysadmin) database role.

Running SharePoint Team Services Setup

To install SharePoint Team Services, you need a Windows user account that is a member of the Administrators group on the computer on which SharePoint Team Services is installed. The user must also be a member of the db_datareader role for the SharePoint Team Services database in SQL Server.

To add your Windows user account to the db_datareader database role, follow these steps:

1. Click Start, point to Programs, point to Microsoft SQL Server, and then click Enterprise Manager.
2. Expand Microsoft SQL Servers, expand SQL Server Group, expand ServerName (where ServerName is the name of the server), and then expand Databases.
3. Click the SharePoint Team Services database. For example, click ServerName_LM_W3SVC_1_Collab, where ServerName is the name of the server.
4. In the right pane, right-click Users, and then click New Database User.
5. In the Login name box, click your Windows user account that is a member of the local Administrators group, or click BUILTIN\Administrators.
6. Under Database role membership, click to select the db_datareader check box, and then click OK.

NOTE: If you are using an existing Windows user account, verify that the account is a member of the db_datareader database role.

Run the PSComplus.exe Utility to Impersonate the Account for a COM+ Application

If you choose to defer the portion of Microsoft Project Server Setup that configures a connection to Analysis Services or SharePoint Team Services, you must run the Microsoft Project Server COM+ Settings tool (PSComplus.exe). This tool provides the name of a user account (in the format of Domain\UserName) that is impersonated by a COM+ application to allow Microsoft Project Server to connect to the Analysis Services and SharePoint Team Services computer for Analysis Services (OLAP) access, SharePoint Team Services administration, and SharePoint Team Services database access.

PSComplus.exe is located in drive:\Program Files\Microsoft Project Server\Bin\1033, where drive is the drive on which Windows is installed.

To run PSComplus.exe, follow these steps:

1. Start Windows Explorer, and then move to the following location:

   drive:\Program Files\Microsoft Project Server\Bin\1033

2. Double-click PSComplus.exe.
3. Type the appropriate Windows user account and password in the Username and Password boxes under Analysis Services (OLAP) Access Identity, SharePoint Team Services Administration Identity, and SharePoint Team Services Database Access Identity.
4. Click Create\Update COM+ Apps.