Active Roles comes with a comprehensive suite of report definitions, contained in the Active Roles Report Pack. To work with reports, you need to:
The Active Roles Collector is used to prepare data for reporting, allowing you to configure, schedule, and run data collection jobs. Collector stores report data in a database on SQL Server. For best results, use Microsoft SQL Server 2008 or a later version of SQL Server to host the Collector’s database.
To install the Collector
Once you have installed Collector, you can start the Collector wizard by selecting Active Roles 7.2 Collector and Report Pack on the Apps page or Start menu, depending upon the version of your Windows operating system.
Report Pack requires Microsoft SQL Server Reporting Services (SSRS). Make sure that you have SSRS deployed in your environment. When deploying Report Pack, the Collector wizard prompts you for the address (URL) of the Report Server Web service. You can find this address on the Web Service URL page in the Reporting Services Configuration Manager tool on the server where SSRS is installed.
To deploy the Report Pack
You can start the Collector wizard by selecting Active Roles 7.2 Collector and Report Pack on the Apps page or Start menu, depending upon the version of your Windows operating system.
By default, the URL is http://<serverName>/ReportServer. You can use the Reporting Services Configuration Manager tool to confirm the server name and URL. For more information about URLs used in Reporting Services, see the topic “Configure Report Server URLs (SSRS Configuration Manager)” at http://msdn.microsoft.com/library/ms159261.aspx.
Configuring the data source is an optional step. If you do not have a database prepared by Collector, you can configure the data source later, after you have deployed the Report Pack. For instructions, see “Working with reports” in the Active Roles Administrator Guide.
You can create and view Active Roles reports using Report Manager, a Web-based tool included with SSRS. For instructions, see “Generating and viewing a report” in the Active Roles Administrator Guide.
Upgrading from Active Roles 7.0.x to Active Roles 7.x is always an in-place upgrade.
Upgrading from Active Roles 6.9 version to 7.x version is a side-by-side upgrade, which does not interrupt operations or affect the configuration of your earlier Active Roles version. To ensure smooth upgrade to the new Active Roles version, you should first upgrade the Administration Service and then upgrade the Web Interface.
Active Roles 6.x components are not used in the upgrade and neither are any components from the earlier version are uninstalled.
|
NOTE: Before upgrading to the latest version of Active Roles, the add-ons of the earlier versions must be uninstalled. |
After an upgrade of Active Roles components to the Active Roles 7.2, the Office 365 add-on which was supported in the earlier versions of Active Roles, ceases to work. Hence, it is recommended to uninstall the Office 365 add-on prior to the upgrade of Active Roles.
|
NOTE:
|
To upgrade existing Active Roles 7.0.x to the latest version, perform the following steps.
To upgrade the Active Roles package
Note: After upgrading the Active Roles package to 7.2, perform Configuring Active Roles 7.2 for in-place upgrade
|
NOTE:
|
The following steps describe the in-place upgrade scenario for Active Roles 7.2:
The fields in the wizard are auto-populated with the recently configured database details (including the Management history SQL Server and Database if it exists seperately).
|
NOTE: If you click Next without selecting the check box, an error is displayed prompting you to follow the instructions given against the check box and select the check box. |
The upgrade starts and the Exectution tab displays the Progress bar for the upgrade.
The database upgrade process creates a backup of the earlier version database in the format "DatabaseName__BACKUP "
After the database upgrade is complete, the Active Roles Service is automatically started and ready for use.
|
NOTE: To upgrade multiple Active Roles Service instances, login to the individual systems where Active Roles Service was upgraded, and perform the above mentioned steps for each Service. |
The new Administration Service is only compatible with the Active Roles user interfaces (Web Interface and console) of version 7.2. Earlier versions of the user interfaces may not work with the new Administration Service. The user interfaces of version Active Roles are only compatible with the Administration Service of version 7.2. Therefore, to use the Active Roles console or Web Interface of version 7.2, you first need to upgrade the Administration Service.
An upgrade of Active Roles may affect custom solutions (such as scripts or other modifications), if any, that rely on the Active Roles functions. Custom solutions that work fine with an earlier Active Roles version may cease to work after the upgrade. Prior to attempting an upgrade, you should test the existing solutions with the new Active Roles version in a lab environment to verify that the solutions continue to work.
To upgrade a version earlier than 6.9 to 7.x, you first need to upgrade to version 6.9.
You can upgrade the Administration Service of version 6.9, 7.0, or 7.1 to version 7.2.
Upgrading the Administration Service implies creation of a new Administration Service instance of the latest version, with the configuration and management history data imported from your Administration Service of an earlier version. As a result, the new Administration Service instance inherits all of your existing Active Roles configuration settings, such as managed domains, managed units, permission assignments, policies, workflows, virtual attributes and so forth. By importing management history data, you transfer change history, approval tasks, and temporal group membership tasks from your Administration Service of an earlier version to the new Administration Service instance.
To upgrade the new Administration Service instance from 7.0.x to 7.1.x, perform the following steps:
|
NOTE: Before upgrading to the latest version of Active Roles, the add-ons of the earlier versions must be uninstalled. |
The fields in the wizard are auto-populated with the recently configured database details.
|
NOTE: If you click Next without selecting the check box, an error is displayed prompting you to follow the instructions given against the check box and select the check box. |
The upgrade starts and the Exectution tab displays the Progress bar for the upgrade.
The database upgrade process creates a backup of the earlier version database in the format "DatabaseName__BACKUP "
After the database upgrade is complete, the Active Roles Service is automatically started and ready for use.
Upgrading from Active Roles 7.0.x to Active Roles 7.x is always an in-place upgrade.
Upgrading from Active Roles 6.9 version to 7.x version is a side-by-side upgrade, which does not interrupt operations or affect the configuration of your earlier Active Roles version. To ensure smooth upgrade to the new Active Roles version, you should first upgrade the Administration Service and then upgrade the Web Interface.
If you no longer need the Administration Service of the earlier version, you can uninstall it using Programs and Features in Control Panel: Right-click Administration Service in the list of installed programs, and then click Uninstall.
To create a new Administration Service instance, you first install Administration Service files and then perform initial configuration.
To install the Administration Service files
ActiveRoles.exe
.
The Setup wizard only installs the files. After you have completed the Setup wizard, you need to configure the newly installed Administration Service instance by using Active Roles Configuration Center that opens automatically if you select the I want to perform configuration check box on the Completion page in the Setup wizard. Another way to open Configuration Center is by selecting Active Roles 7.2 Configuration Center on the Apps page or Start menu, depending upon the version of your Windows operating system.
To perform initial configuration
After you have installed and initially configured the Administration Service of the new version, import the configuration data from the database used by your Administration Service of the earlier version. First, identify that database:
Yo can identify the database name and SQL Server name from the first string in the Configuration Databases and Replication area that has the following format: Database <name> on SQL Server <name>.
Then, perform the import. You can do this using the Import Configuration wizard provided by Configuration Center. On the Source Database page in the Import Configuration wizard, supply the database name and SQL Server name you have identified. For detailed instructions, see Steps to deploy the Administration Service earlier in this document.
|
NOTE: When an in-place upgrade is performed from Active Roles version 7.0 to 7.2, the web interface does not get upgraded. However, the Configuration Center or any client report the Active Roles Web interface version incorrectly as 7.2. To upgrade the Web interface to the latest version see Upgrading the Web Interface. |
After you have imported configuration of your earlier Active Roles version, import the management history data from the database used by your Administration Service of the earlier version. First, identify that database:
Yo can identify the database name and SQL Server name from the first string in the Management History Databases and Replication area that has the following format: Database <name> on SQL Server <name>.
Then, perform the import. You can do this using the Import Management History wizard provided by Configuration Center. On the Source Database page in the Import Management History wizard, supply the database name and SQL Server name you have identified. For detailed instructions, see Steps to deploy the Administration Service earlier in this document.
If multiple instances of the Administration Service use a single database, then you can perform the upgrade as follows:
As a result of this step, you have an Administration Service instance of the new version connected to the new database containing the data imported from the old database. The other instances of the Administration Service are not upgraded at this point; they continue to use the old database.
As a result of these steps, multiple Administration Service instances of the new version use a single database updated with the configuration and management history data of your earlier Active Roles version.
To upgrade a version earlier than 6.9 to 7.x, you first need to upgrade to version 6.9.
You can upgrade the Web Interface of version 6.9, 7.0, or 7.1 to version 7.2.
Upgrading the Web Interface implies creation of a new Web Interface instance of the latest version that has the same Web Interface sites as your Web Interface of an earlier version, with the site configuration data imported from your Active Roles configuration of the earlier version. As a result, the new Web Interface sites inherit all customizations that were made to the menus, commands, forms and other elements of your Web Interface sites of the earlier version.
When an import configuration is performed from Active Roles version 7.1 to 7.2, the web interface does not get upgraded. However, the Configuration Center or any client report the Active Roles Web interface version incorrectly as 7.2. To upgrade the Web interface to the latest version see Upgrading the Web Interface.
To create a new Web Interface instance of the latest version and import the site configurations perform the following steps:
These steps are covered in the topics that follow.
You can install the Web Interface of version Active Roles side-by-side with the Web Interface of version 6.9 on the same computer, and perform the upgrade without interrupting operations or affecting the configuration of your Web Interface sites of the earlier Active Roles version.
If you no longer need the Web Interface of the earlier version, you can uninstall it using Programs and Features in Control Panel: Right-click Web Interface in the list of installed programs, and then click Uninstall.
When creating Web Interface sites of the new Active Roles version, you need to know which configuration objects are used by your Web Interface sites of the earlier version. Each site stores its configuration in a certain object on the Administration Service, referred to as the site configuration object. Upgrade of the Administration Service copies the existing site configuration objects to the new Administration Service, retaining the name of each object.
To create a Web Interface site of the new Active Roles version that inherits your existing site customizations, you need to specify the name of the corresponding site configuration object of the earlier version. Then, Active Roles creates a site configuration object of the new version, imports the site configuration data to that object, and causes the new Web Interface site to use that object. As a result, the new Web Interface site has the same configuration as the Web Interface site of the earlier version.
You can identify your existing site configuration objects by using the Web Interface Sites Configuration wizard on the computer running the Web Interface of Active Roles version 6.9 or earlier.
To identify the configuration object of the Web Interface site of an earlier Active Roles version
To start the wizard, select Web Interface Sites Configuration on the Apps page or Start menu, depending upon the version of the Windows operating system on the Web server.
The page lists your Web Interface sites of the earlier Active Roles version.
You can distinguish sites by alias, shown in the Virtual Directory column on the Web Interface Configuration page. The alias defines the virtual path used in the address of the Web Interface site on the Web server. For example, in Active Roles version 6.9, the alias of the default Web Interface site for Administrators ARWebServerAdmin
, which results in the following address of that site: http://
<Host>/ARServerAdmin
.
The name of the object is displayed in the Name box under the Use existing configuration option, and includes the version number. For example, the name of the site configuration object used by the default Web Interface site for Administrators of version 6.9 is Site for Administrators (6.9.0).
To identify the configuration object of the Web Interface site of the current Active Roles version
You can start Configuration Center by selecting Active Roles 7.2 Configuration Center on the Apps page or Start menu, depending upon the version of your Windows operating system.
The Web Interface page is displayed, which lists the Web Interface sites of the current Active Roles version that are deployed on the Web server running the Web Interface.
For each Web Interface site, the list provides the following information:
You can also use Configuration Center to:
For more information, see the Web Interface management tasks section in the One Identity Active Roles Administrator Guide.
Identify the configuration object for each of your existing Web Interface sites, and note down the name of each object. You will need these names when creating the Web Interface sites of the new Active Roles version.
To create a new Web Interface instance, you first install Web Interface files and then perform initial configuration.
To install the Web Interface files
The Setup wizard only installs the files. After you have completed the Setup wizard, you need to configure the newly installed Web Interface instance by using Active Roles Configuration Center that opens automatically if you select the I want to perform configuration check box on the Completion page in the Setup wizard. Another way to open Configuration Center is by selecting Active Roles 7.2 Configuration Center on the Apps page or Start menu, depending upon the version of your Windows operating system.
To perform initial configuration
This starts the wizard that will perform initial configuration of the Web Interface.
If the new Administration Service instance runs on the computer on which you are installing the new Web Interface, choose the option Administration Service on the computer running the Web Interface. Otherwise, choose the option Administration Service on this computer, and supply the fully qualified domain name of the computer running the new Administration Service instance.
After you have installed and configured the Web Interface instance of the new Active Roles version, you can use Configuration Center to create Web Interface sites of the new version, importing site configuration data from the configuration objects used by your existing Web Interface sites of the earlier Active Roles version (see Upgrading the Web Interface earlier in this document). As a result, the new Web Interface sites will inherit all customizations that were made to the menus, commands, forms and other elements of your Web Interface sites of the earlier version.
To create a Web Interface site based on an old configuration object
You can open Configuration Center by selecting Active Roles 7.2 Configuration Center on the Apps page or Start menu, depending upon the version of your Windows operating system.
The alias defines the virtual path that is a part of the Web Interface site’s address. You can view the resulting address on the Web Application page.
This must be the name of the configuration object used by one of your existing Web Interface sites of the earlier Active Roles version (see Upgrading the Web Interface earlier in this document).
Perform these steps for each of your Web Interface sites of the earlier version, selecting the appropriate object name in Step 7b.
After you have created the Web Interface sites of the new version that inherit the configuration of your Web Interface sites of the earlier version, you might delete the default Web Interface sites that were created by initial configuration of the Web Interface (see Upgrading the Web Interface earlier in this document).
To delete the default Web Interface sites
You can open Configuration Center by selecting Active Roles 7.2 Configuration Center on the Apps page or Start menu, depending upon the version of your Windows operating system.
You can distinguish list entries representing default Web Interface sites by the name in the Configuration column:
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy