RVY200653: How to create Upload User with least privilege

1

Login on to the RayVentory Server. Open “Computer Management” console with administrative permission and select view “Local Users and Groups”. 

2 

Add a new local user, e.g. “RayVentoryUploader” and select "User cannot change password" and "Password never expires". 

3 

Remove the new upload user from the normal "Users" group. 
This blocks standard login and direct access to Server applications and resources. 

1

Open “IIS Server Manager” and select "ManageSoftRL" folder (Upload location).

2

Select “Authentication” icon …

and verify that "Basic Authentication" is “enabled” or enable it:

3

Expand the “ManageSoftRL” directory on the left navigation bar and mark sub-folder “Incoming”

Hint: The IIS folder “ManageSoftRL” is the name of a virtual web folder, pointing to a folder within the file system.

4

Right click on sub-folder “Incoming” and select “Edit permissions”

5

Select the “Security” tab within the “Edit permissions” dialog, which now shows the folder path from file system perspective, e.g. “E:\RayVentory\Incoming”.

Hint: If using RayManageSoft (RMSi), the “Incoming” folder is located in the “Warehouse Directory”.
In addition, RMSi uses also a shared folder “ManageSoftRL$” (network share), pointing to the same file system path.

6

Select “Edit” permissions and “Add” the new User account (e.g. “RayVentoryUploader”) to the list of Group or user names.

Grant "read" and "write" permissions for the ManageSoftRL directory (Incoming folder).

Save your changes and test inventory uploads by using the different upload methods explained below.