Platform Deployment Guide › Data Warehouse › Advanced Configuration › Retrospectively Enable the Data Warehouse › Specify the Unrestricted Search User

Specify the Unrestricted Search User

Before you enable the Data Warehouse, you may need to specify the Unrestricted Search User database account.

This database account corresponds to the 'Unrestricted' security model. CA DataMinder consoles and external reporting tools can use this database account when searching the CA DataMinder Data Warehouse and CMS database for events. Unlike normal Search User database accounts, the Unrestricted Search User is not subject to row level security (RLS) when searching the database. If a reviewer has 'Unrestricted' security model, the reviewer can see any events when they run a search or report. Search results or reports are not restricted by policy class or the reviewer’s management group.

To specify an existing Unrestricted Search User

From a command prompt in the \system subfolder of the CA DataMinder installation folder on the CMS, run the following command:

wgninfra -localexec wigan/schema/Schema SetUser Unrestricted <USuser_Name> <USuser_Password>

Where <USuser_Name> and <USuser_Password> specify the username and password for the database account.

To create and specify the Unrestricted Search User

If this database account does not already exist, you must create it. If required, you can run a variation of the previous command to create a new database account and set this account to be the Unrestricted Search User.

From a command prompt in the \system subfolder of the CA DataMinder installation folder on the CMS, run the following command:

wgninfra -localexec wigan/schema/Schema SetUser Unrestricted <USuser_Name> <USuser_Password> Create <DBA_Name> <DBA_Password> <Tablespace>

Where:

• <DBA_Name> and <DBA_Password> specify the username and password for a Database Administrator account that CA DataMinder can use to log in to SQL Server or Oracle to create the Unrestricted Search User.

  For Oracle databases, this Database Administrator account must have the following system privileges:

  CREATE SESSION 
  RESOURCE 
  DBA 
  SYSDBA 
  

• <Tablespace> specifies the default tablespace for the Unrestricted SearchUser.

  Important! The tablespace parameter is only used by Oracle databases. However, you must always supply this parameter, even if the data warehouse is hosted in a SQL Server database. The SetUser command requires this parameter, even though the actual value is disregarded by SQL Server databases.