We currently use scheduled tasks in EasyMorph Server, many of which either load data from a file stored on a network location or export to a network location. For this to work we have to grant access to the network location for the service account.
This approach has been questioned by our IT security team as we now have a proliferation of access granted to the EasyMorph Server service account. They would prefer user-based permission.
Is it possible to schedule a task to run as a named user? If not can you think of any other solutions that may appease our security team? It doesn't need to be a 'live' solution if there is something in the pipeline that we can propose as a future solution.
Thanks
The Server has the concept of workers - separate child processes that can run under a different Windows account than the Server. For each space, there is a worker that runs tasks and performs file operations in that space. A worker runs all tasks of the space under the same (worker's) account.
Workers are configured in the tab "Workers" of the Server's admin UI.
See the Server Admin Guide for more details about workers.
Workers don't represent users exactly, but can provide more granular access separation.
Thanks Dmitry. I've tested that out and it works as we'd need it to.
Is there a simple way to move Tasks between Spaces or do they need recreating one at a time?
You can copy the task xml files from one space folder to another (in the system folder), and then reload spaces (both target and destination) by pressing the "Reload" button in the list of spaces as described here: Moving tasks between spaces - #10 by dgudkov