Security¶
Service Account¶
The “Rensen Dataristix Core” service and Connector services are installed as Windows services running under the “Local Service” account, a built-in Windows account with low privileges. You can change the account for each of the services to a different user account if preferred. For example, you may want to change the account for the ODBC Connector service to a certain user account for the use of Integrated Security with your database server.
When changing service accounts then additional folder permissions need to be granted for the Dataristix root data folder and specific sub folders. The root data folder is located at:
C:\ProgramData\Rensen\Dataristix
Important
Software updates may reset service accounts to “Local Service” and may reset some folder permissions. Remember to re-apply service account settings and review folder permissions after installing service updates.
Core Service¶
For the “Rensen Dataristix Core” service, the following folder permissions need to be granted for the user account that the service runs as.
C:\ProgramData\Rensen\DataristixFull Access permissions.
C:\ProgramData\Rensen\Dataristix\core\uacFull Access permissions.
Connector Services¶
User accounts for Connector services may be configured with the same permissions as the Core service or may have the following more restrictive permissions configured:
C:\ProgramData\Rensen\DataristixRead Access.
C:\ProgramData\Rensen\Dataristix\core\uacRead Access.
C:\ProgramData\Rensen\Dataristix\core\servicesFull Access permissions.
C:\ProgramData\Rensen\Dataristix\modules\<CONNECTOR>Full Access permissions.
<CONNECTOR>refers to the name of the respective Connector subfolder, for example “ODBC Connector” or “OPC UA Connector”.
Note
Please check the specific Connector documentation for a “Security” section defining additional required folder permissions of the respective connector service.