Deep Dive: Excel Services and PerformancePoint Services Administration and TroubleshootingKevin DonovanProgram Manager, Office BIMicrosoft Corporation

DBI401

=OR(B2, NOT(B2))

http://commons.wikimedia.org/

Session Objectives and Takeaways

OverviewCommon Setup and Configuration Errors for accessing data (and how to fix them)Demos

Where are we going today?

Common Concepts

1

Excel Services config and data

errors 2

PerformancePoint Services

3

Overview

External Data: Leveraging the Secure Store

The Secure Store

PPS

Excel

Services

Visio Services Access

Services

Oth

ers

• Why not the app pool identity?• Storing the credentials securely using the secure

store

Excel Services

Troubleshooting and Configuring

• Create and configure an Excel Services Service Application

• Show Trusted Location Configuration

Let’s get some context here

Trusted File Locations

“This workbook cannot be opened because it is not stored in an Excel Services Application trusted location.”

Ocurrs on workbook open.

Allow External Data

“The trusted location where the workbook is stored does not allow external data connections.”

“The data connection path in the workbook points to a file on the local drive or is an invalid URI.

Verify that the path to the data connection file in the workbook points to a data connection file in a Data Connection Library.”

???

Allow External Data

“The data connection path in the workbook points to a file on the local drive or is an invalid URI.”

Provider=MSOLAP.5;Persist Security Info=True;Initial Catalog=Microsoft_SQLServer_AnalysisServices;Data Source=$Embedded$;MDX Compatibility=1;Safety Options=2;ConnectTo=11.0;MDX Missing Member Mode=Error;Optimize Response=3;Cell Error Mode=TextValue

Remember PowerPivot cases!

Show an Untrusted Document

The Office Data Connection (ODC) File

“The following data connection file does not exist or you do not have permission to it:http://<server>/<site>/file.odc”

???

ORNo access

to this location or

the .odc file is gone.

The field is just plain

empty.

Trusted Data Connection Libraries and Providers

“The Data Connection File http://<server>/<site>/file.odc used in the workbook is not in a trusted location.”

“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”

Authentication Issues

Now what?

Data connectivity and refresh often comes down to how you have your authentication set up . . .

My workbook is in a trusted location

It allows for data connections

My data source locations are trusted

Authentication is the likely culprit . . .

Creating Workbook Connections

Excel Services authentication settings:

Windows Authentication (default)SSSNone

Client and Server Authentication Options

The Windows Authentication” Workbook Connection

Default connection to data sourcesUses the credentials of the Windows user executing the query.Works great for Excel client, but not so well for Excel Services.Needs Claims To Windows Token Service

Windows request

Windows response

Claims to Windows Token Service

“The data connection uses Windows Authentication and user credentials could not be delegated.”

WFEApp

Server

Data

Store

claims kerberos

STS C2WTS

ID from browser

Access to the Data Source

“Unable to refresh data for a data connection in the workbook. Try again or contact your system administrator.”

The dreaded Kerberos errors . . . “Unable to get a connection” “CalculationServer.Credentials” “CalculationServer.Interop.ConnectionInfoException”

BISM (and EffectiveUsername)

to the rescue!

“Access was denied by the external data source.”

Target Application Credentials

“An error occurred while accessing application id <TargetApplication> from Secure Store Service.”

“An error occurred during an attempt to establish a connection to the external data source.”

OR

Wrong password…

The “SSS” Workbook Connection

Must know the name of a Target ID in the Secure Store

Uses the credentials stored as part of the Tartget ID

Used for published Excel Services workbooks on SharePoint.

Add PowerPivot SSS Data Refresh account to SharePoint workbook library.

Refers to the same

thing

Configure the Secure StoreCreate a Target App IDConnect Using the SSS Option

The “SSS” Workbook Connection

Using SQL credentials in the secure store.

Client stuffServer stuff

The “None” Authentication Setting

Uses the unattended service account to log into the data source.

Uses the connection string to retrieve the data.

The “None” Authentication Setting

Did you forget to add a TargetApp ID in Excel Services?

“The data connection uses None as the external data authentication method and the Unattended Service Account has not been configured.”

Is the app pool account a member of the target app?

AND

Excel Services Works!

My workbook is in a trusted locationIt allows for data connectionsMy data source locations are trustedMy authentication types . . . authenticate

Almost there . . .

Common Concepts

1

Excel Services config and data

errors

2

PerformancePoint Services

3

• Enabling Site Collection Features• Creating a BI Center Site• Creating a PPS Chart with Custom Lists and Document

Libraries (adding your content types manually)

PerformancePoint Services

Common PerformancePoint Errors and Fixes

Unattended Service Acct Permissions

Per-User Auth

Item-Level Permissions have been

added/removed

Designer vs. Contributor in

Dashboard Designer

Common PerformancePoint Errors and Fixes

Feature ActivationAccess to content database for new app pools

PS> $w = Get-SPWebApplication(“web application name”)PS> $w.GrantAccessToProcessIdentity("<domain\user>")

B/R, import/export – breaking references across site collections. Only on perfectly mirrored sites.

Disabled “show details” and “decomposition tree” (Demo)

Common PerformancePoint Errors and Fixes

Troubleshooting Recap

Error Locations (Windows Logs Applications)Process Accounts

Web application app pool accountPerformancePoint app pool account

PermissionsSharePoint accounts and permission levels

Contributor = ability to saveDesigner = ability to publish

Dashboard Designer accounts (Windows account)

Starting the Service

Configure end-to-end dashboard with Excel Services and PeformancePoint Services

Related Content

Building Self-Service BI Applications Using PowerPivot (DBI301)

Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps (SQL Server 2012) (DBI304)

Find me anytime at kdonovan@microsoft.com

Program Manager, Microsoft Business Intelligence

KevinDonovan

kdonovan@microsoft.com

PerformancePoint Blog

@kp_donovan

Track Resources

http://technet.microsoft.com/en-us/library/ff829837.aspx (Kerberos Whitepaper)

http://blogs.msdn.com/b/performancepoint/ (PerformancePoint Svcs Blog)

http://blogs.office.com/b/microsoft-excel/archive/category/11361.aspx (Excel Blog)

Track Resources

@sqlserver@TechEd_NA#msTechEd

mvaMicrosoft Virtual Academy

SQL Server 2012 Eval Copy

Get Certified!

Hands-On Labs

Resources

Connect. Share. Discuss.

http://northamerica.msteched.com

Learning

Microsoft Certification & Training Resources

www.microsoft.com/learning

TechNet

Resources for IT Professionals

http://microsoft.com/technet

Resources for Developers

http://microsoft.com/msdn

Complete an evaluation on CommNet and enter to win!

MS Tag

Scan the Tagto evaluate thissession now onmyTechEd Mobile

© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to

be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS

PRESENTATION.