Documentation forAccess Rights Manager

Run the Access Rights Manager Configuration Wizard

Before you can use Access Rights Manager, complete the Configuration Wizard to collect the required information for the base configuration.

When you are finished, run the Scan Configuration Wizard to collect information for your first Active Directory scan and the first file server scan.

Any information collected by the Configuration Wizard can be changed later in the configuration application.

  1. The first time you log in, you can only log in as the user that installed Access Rights Manager. Later, you can create more ARM users.
  2. In typical cases you will use the local machine that you are currently working on. You should only change the hostname if you are not working locally.
  3. Click Login.

  1. Enter credentials that the ARM server will use for accessing Active Directory. The user that performed the setup is preset. If you want to use the preset account, you just need to add the password.

We recommend the use of a service account. The required permissions can be found in the system requirements at the section Service account permissions.

  1. Click Next.

Enter the SQL server credentials and select the authentication method.

In case of an Express Installation, everything is preconfigured and no changes are required.

  1. Enter the name or IP address of the SQL server. You can use the dropdown to find existing SQL servers. If your desired SQL server is findable depends on SQL server and network settings.
  2. Select the instance of the SQL server.
  3. Select the authentication method and enter the SQL Server credentials. We recommend the use of a service account. The required permissions can be found in the system requirements at the section Service account permissions.

  4. Activate the encrypted data transfer between the ARM server and the SQL server. The encrypted data transfer must first be prepared as described in the following instructions: Enable encrypted connections to the Database Engine (© 2020 Microsoft, https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/enable-encrypted-connections-to-the-database-engine?view=sqlallproducts-allversions, obtained on August 31, 2020).

  1. Click Next.

  1. Create a new database or select an existing one.
  2. Click Next.

Configure the Web Components

In case of an Express Installation, everything is preconfigured and no changes are required.

  1. SolarWinds recommends to run the Web Components on the ARM server itself. You can specify a different server.
  2. Select a Certificate. If you want to change the certificate later you can use the ARM Web Configurator or the IIS Manager to bind it to the site.
  3. Click Next.

You can change the RabbitMQ settings. SolarWinds recommends to use the default settings.

  1. Click Next.

The Configuration Wizard displays an overview of all settings.

If you click Save Config, the ARM service is restarted. This takes a while and the message "Server not connected" is displayed during the restart. This is the normal behavior. Please be patient.

Run the Access Rights Manager Scan Configuration Wizard

  1. Enter the credentials that are used to scan Active Directory and the file server.

SolarWinds recommends the use of an service account. Required permissions can be found here.

  1. Specify the domain that the scan account is coming from.

This is not the domain to scan. The domain to scan will be selected in the next step.

  1. Click Next.

  1. Select the domain to scan. If you do not select a domain, the AD scan will be skipped.

  2. Change the schedule for the AD scan.

  3. Click Next.

  1. Select a file server to scan. If you do not select a file server, the file server scan will be skipped.
  2. Set the file server type.

For optimal scanning performance, please select the correct type. When set to "Auto", the scan performance may be decreased.

  1. Select the shares to be scanned.

Select only a few shares for fast first results. Avoid selecting "$ shares".

  1. Change the schedule for the FS scan.
  2. Click Next.

You can modify several file server scan options later in the configuration application. For more information please refer to the Administrator Guide.

Click Save Scans to save the configuration and start scanning.

After that you can close the Scan Configuration Wizard. The scans continue to run in the background. You can see the scan progress in the ARM Configuration application.

View the scan progress

The following steps are optional. Start and Login to the ARM Configuration application. Select Scans from the main menu.

  1. You can see the two new scan configurations.
  2. Access Rights Manager displays information on the progress and success of the scans.