Bookshelf Home | Contents | Index | Search | PDF |
Siebel Server Installation Guide for Microsoft Windows > Preparing for the Installation > Planning Your Siebel Deployment >
Creating Siebel Accounts
The Siebel Enterprise Server requires that you create one or more of the following standard Windows system user accounts, depending on whether you implement Central Dispatch:
- Siebel service owner account. An administrator account on each Siebel Server in your Enterprise under which all Siebel processes and components operate. In any deployment, this account must exist on each Siebel Server, the Siebel Gateway Name Server, and on any machine on which the Siebel File System exists.
- Resonate manager account. A user account on each server in your Central Dispatch site that is used by the Siebel Enterprise Server to automatically register Siebel resources with Central Dispatch. This account must exist only if you implement Central Dispatch.
- Resonate monitoring account. A user account that is required for Central Dispatch connection brokering. This account must exist if you implement connection brokering with Central Dispatch.
NOTE: Do not disable these accounts. They must be enabled to connect to the nodes on which the accounts are created.
Creating the Siebel Service Owner Account
This is the user account on the Siebel Gateway Name Server and Siebel Servers under which all Siebel processes and components operate. The Siebel Server services operate under the Siebel service owner account.
Use the following guidelines to create the same Siebel service owner account on the Siebel Gateway Name Server, on each Siebel Server in the Enterprise, and on any machine on which the File System exists:
- This account must be an administrator on the Siebel Gateway Name Server and on each Siebel Server with the following Windows 2000 or Windows NT rights and privileges.
- Logon as a Service
- Act as part of the operating system
- Typically, the account should be part of a Windows domain, so that services can be operated under the same account on all Windows servers.
The account must be a domain account if certain components, such as EMail Manager, Communications Outbound Manager, or the Communications Inbound Manager, are enabled in the Siebel Enterprise.
NOTE: The Windows system account, or local system, cannot be used, because that account does not have network access.
- If you implement Siebel Email Response, this account must correspond with the accounts on your corporate email system.
- Determine what the account name and password will be, and record this information in your copy of the Deployment Planning Worksheet. (For security reasons, you may prefer not to record the password.)
- If you are using a local account, then you must set up that account on each server, using the same login ID and password.
- The account password should, preferably, not require a change on next logon.
- The account password must be set not to expire.
- The account name or password cannot contain any spaces.
- It is possible for the Siebel service owner and the Resonate manager accounts to be the same account if either account meets the requirements of both.
Creating the Resonate Manager Account
The Resonate manager account, also known as the Resonate Administrator account, is required when you use Central Dispatch for connection brokering. Therefore, you need an account with this role only if you install connection brokering.
This account is used by the Siebel Enterprise Server to automatically register Siebel resources with Central Dispatch.
Use the following guidelines to create the same Resonate manager account on each machine in the Central Dispatch site; that is, the machines on which the Central Dispatch Schedulers, the Siebel Gateway Name Server, and the Siebel Servers on which Central Dispatch performs connection-brokering:
- This account needs only to be user-level.
- If you are using a local account, then you must set up that account on each server, using the same login ID and password.
- Determine what the account name and password will be, and record this information in your copy of the Deployment Planning Worksheet. (For security reasons, you may prefer not to record the password.)
- The account password should, preferably, not require a change on next logon. If your site requires a change of password each time a user logs in, see Implementing Load-Balancing with Central Dispatch.
- The account password must be set not to expire.
- An account name cannot contain embedded spaces.
- It is possible for the Siebel service owner and the Resonate manager accounts to be the same account if that account satisfies the requirements for each account.
Creating the Resonate Monitoring Account
This account is required for the Central Dispatch connection brokering server. Therefore, you need this account only if you install connection brokering. Central Dispatch uses this account to monitor the load on your Siebel Servers and incoming connection requests.
The Resonate monitoring account, like the Resonate manager account, must exist on each machine in the Central Dispatch site.
Use the following guidelines to create a Resonate manager account on each machine in the Central Dispatch site:
- This account should be user-level—it should not have administrative privileges.
- The Resonate monitoring account must have login privileges on each machine, but requires no additional privileges.
- It is recommended that the Resonate monitoring account and the Resonate manager account be different accounts, so that there is no possibility that the Resonate monitoring account can administer the machine. As such, they should have different passwords.
NOTE: Never log on to Dispatch Manager accounts directly as a user. The accounts exist on each machine so that Dispatch Manager can validate the password you enter when connecting to your Central Dispatch site before granting administration or monitoring privileges.
Bookshelf Home | Contents | Index | Search | PDF |
Siebel Server Installation Guide for Microsoft Windows Published: 25 June 2003 |