The K2 Workspace Service Account is the account that the K2 Workspace application pool will run under.
The rest of this guide will use domain\K2 Workspace Service Account as a placeholder for the K2 Workspace Service Account name. When installing K2 in your environment, replace this placeholder with your actual account name.
The K2 Workspace Service Account will need the following permissions:
| Web Server | |
|---|---|
| Permission | Used For |
| IIS_WPG Local Group |
In order to function properly as an application pool within IIS, the K2 Workspace Service Account needs to be a member of this group if Windows Server 2003 is used. |
| IIS_IUSRS | In order to function properly as an application pool within IIS, the K2 Workspace Service Account needs to be a member of this group if Windows Server 2008 is used |
| Rights | Folder or Registry Key |
| Modify | %SYSTEMROOT%\temp |
In K2 blackpearl 4.5 the K2 Workspace Report Designer does not use the SSRS server.
SSRS integration is still supported for customers:
- Who wish to use the SSRS server to expose reports in other contexts other than K2 Workspace or K2 Process Portals
- Who wish to use other design tools and then import reports into K2 Workspace Report Designer
| Reporting Services Server | |
|---|---|
| Permission | Used For |
| Content Manager |
The K2 Workspace Application pool Account (i.e. the Service Account) must be added in the Content Manager role on the SQL Server Machine, where the SSRS Server has been installed and configured. |
Application Pool Rights
The K2 Workspace Service Account will require elevated permissions to run the application pool. We will use the aspnet_regiis command to configure this. This tool ships with the .NET Framework, and takes the pain out of configuring all the required NTFS permissions, IIS_WPG group membership, security policy user rights assignments, and IIS metabase access rights. For more information, see the MSDN article on setting security rights for .NET Applications, at http://msdn2.microsoft.com/en-us/library/ms998297.aspx.
To use the aspnet_regiis command, perform the following steps:
- Open a command prompt (Start > Run > cmd)
- Change directories to the .NET Framework folder (C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727)
- Type aspnet_regiis -ga domain\K2 Workspace Service Account and hit Enter
- After the command completes, type iisreset and hit Enter
 |
While infrastructure changes are required by K2, each environment is different and has its peculiarities which must be taken into account. Modifying the infrastructure could have unforeseen results if the changes are not appropriately understood or managed. Given the broad spectrum of underlying infrastructure utilized, it is recommended that a panel or committee with appropriate skill in each area concerned be assembled to outline the underlying infrastructure changes and gauge the impact of the required changes. |
