Using PerformancePoint Services - Business Intelligence in Microsoft SharePoint 2013 - page 227

Tip Configure trusted data sources to specific sites, particularly when the Unattended
Service Account you configure for the data source has access to sensitive information such
as financial or personnel data.

Use Trusted Content Locations to restrict access to PerformancePoint objects, such as KPIs,
scorecards, indicators, and reports. You'll see how to configure these in the next section,
as well.

■

Configure security for PerformancePoint
In addition to restricting trusted data source and content lists, you must also configure the SSS.

If you have opened up the Application Settings and see a warning that you do not have the SSS
application and Proxy running, you must “generate” a key and then configure an Unattended Service
account. The Unattended Service account is an Active Directory domain account that is used for
accessing PerformancePoint Services data sources.

Note We specify “for PerformancePoint” in the following procedure because it's important
to remember that SSS configuration is performed differently for PerformancePoint than for
the other services.

Fortunately, many of the steps are automated for PerformancePoint SSS configuration. You must be a
Service Application Administrator for the SSS instance.

To configure SSS for PerformancePoint, follow these steps:

In Central Administration, click Manage Service Applications. 1.

Click Secure Store Service in the list of service applications. 2.

On the Service Applications tab, click Manage. 3.

On the Edit tab, click Generate New Key. 4.

Note Steps 4 through 6 are only applicable if secure store is not already configured. If Excel
Services or PowerPivot Services are configured, secure store might already be set up, as
illustrated in Figure 8-7.