Common Security Questions - Revision history

Dgreenwood at 21:47, 10 July 2025

2025-07-10T21:47:42Z

← Older revision		Revision as of 16:47, 10 July 2025
Line 125:		Line 125:
	'''What permissions are required to run Grooper Command Console (GCC)?'''		'''What permissions are required to run Grooper Command Console (GCC)?'''

	Grooper Command Console (GCC) is a command line utility that performs various ~~adminstrative~~ tasks for Grooper. This includes Grooper Repository creation and Grooper service installation.		Grooper Command Console (GCC) is a command line utility that performs various administrative tasks for Grooper. This includes Grooper Repository creation and Grooper service installation.
	* GCC must be run as an administrator to perform most of its functions.		* GCC must be run as an administrator to perform most of its functions.
	* When creating a Grooper database (<code>databases create</code>), the SQL user must have the '''dbcreator''' server role in SQL Server.		* When creating a Grooper database (<code>databases create</code>), the SQL user must have the '''dbcreator''' server role in SQL Server.

Dgreenwood at 21:43, 10 July 2025

2025-07-10T21:43:32Z

← Older revision		Revision as of 16:43, 10 July 2025
Line 127:		Line 127:
	Grooper Command Console (GCC) is a command line utility that performs various adminstrative tasks for Grooper. This includes Grooper Repository creation and Grooper service installation.		Grooper Command Console (GCC) is a command line utility that performs various adminstrative tasks for Grooper. This includes Grooper Repository creation and Grooper service installation.
	* GCC must be run as an administrator to perform most of its functions.		* GCC must be run as an administrator to perform most of its functions.
			* When creating a Grooper database (<code>databases create</code>), the SQL user must have the '''dbcreator''' server role in SQL Server.
			** The SQL user is defined by the <code>[user]</code> and <code>[password]</code> parameters.
			** If these parameters are left blank, GCC will pass through the Windows credentials of the user running GCC.
			* When connecting to a Grooper Repository (<code>connections add</code>), the SQL user must have ''at least'' '''db_datareader''' and '''db_datawriter''' roles in SQL Server.
			** The SQL user is defined by the <code>[user]</code> and <code>[password]</code> parameters.
			** If these parameters are left blank, GCC will pass through the Windows credentials of the user running GCC.
			** This user may require additional roles in SQL server to execute other GCC commands (see below).
	* When initializing a Grooper Repository connection (<code>connections init</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.		* When initializing a Grooper Repository connection (<code>connections init</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.
	* When upgrading a Grooper Repository connection (<code>connections upgrade</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.		* When upgrading a Grooper Repository connection (<code>connections upgrade</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.

Dgreenwood at 21:33, 10 July 2025

2025-07-10T21:33:41Z

← Older revision		Revision as of 16:33, 10 July 2025
Line 48:		Line 48:
	\|-		\|-
	\|		\|
	~~Database access~~		db_datareader
			<br>
			db_datawriter
	\|		\|
	SQL		SQL database roles
	\|		\|
	Read and write access to the Grooper database		Read and write access to the Grooper database
Line 102:		Line 104:
	\|-		\|-
	\|		\|
	~~Database access~~		db_datareader
			<br>
			db_datawriter
	\|		\|
	SQL		SQL database roles
	\|		\|
	Read and write access to the Grooper database		Read and write access to the Grooper database

Dgreenwood at 21:16, 10 July 2025

2025-07-10T21:16:07Z

← Older revision		Revision as of 16:16, 10 July 2025
Line 158:		Line 158:

	: ''For OpenAI models''		: ''For OpenAI models''
	:: Grooper integrates with OpenAI API ''not'' Chat GPT. When using the OpenAI API, your data (prompts, completions, embeddings, and fine-tuning data) ~~is not available to other customers or other third parties. Your data~~ is not used for training to improve OpenAI models (unless you explicitly opt in to share data with OpenAI).		:: Grooper integrates with OpenAI API ''not'' Chat GPT. When using the OpenAI API, your data (prompts, completions, embeddings, and fine-tuning data) is not used for training to improve OpenAI models (unless you explicitly opt in to share data with OpenAI). Your data is not available to other customers or other third parties.

	:: All data passed to and from OpenAI (prompts, completions, embeddings, and fine-tuning data) is encrypted in transit.		:: All data passed to and from OpenAI (prompts, completions, embeddings, and fine-tuning data) is encrypted in transit.

Dgreenwood at 21:10, 10 July 2025

2025-07-10T21:10:30Z

← Older revision		Revision as of 16:10, 10 July 2025
Line 117:		Line 117:

	''Other Grooper services may require additional permissions. For example, an Import Watcher's user may need access to directories used for importing file content.''		''Other Grooper services may require additional permissions. For example, an Import Watcher's user may need access to directories used for importing file content.''


			'''What permissions are required to run Grooper Command Console (GCC)?'''

			Grooper Command Console (GCC) is a command line utility that performs various adminstrative tasks for Grooper. This includes Grooper Repository creation and Grooper service installation.
			* GCC must be run as an administrator to perform most of its functions.
			* When initializing a Grooper Repository connection (<code>connections init</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.
			* When upgrading a Grooper Repository connection (<code>connections upgrade</code>), the Grooper database's SQL user will need the '''db_owner''' role in SQL Server.

Dgreenwood at 17:54, 10 July 2025

2025-07-10T17:54:21Z

← Older revision		Revision as of 12:54, 10 July 2025
Line 116:		Line 116:
	\|}		\|}

	Other Grooper services may require additional permissions. For example, an Import Watcher's user may need access to directories used for importing file content.		''Other Grooper services may require additional permissions. For example, an Import Watcher's user may need access to directories used for importing file content.''

Dgreenwood at 17:54, 10 July 2025

2025-07-10T17:54:04Z

← Older revision		Revision as of 12:54, 10 July 2025
Line 73:		Line 73:
	* Required if also using the application pool identity as a service account running Grooper services		* Required if also using the application pool identity as a service account running Grooper services
	\|}		\|}


	'''What permissions does the Activity Processing service user need?'''		'''What permissions does the Activity Processing service user need?'''

Dgreenwood at 17:52, 10 July 2025

2025-07-10T17:52:52Z

← Older revision		Revision as of 12:52, 10 July 2025
Line 32:		Line 32:
	\|		\|
	Required for checking user's group membership		Required for checking user's group membership
	* The user installing the Grooper web client must also have the capability to query the domain in order to enter the credentials for the Grooper app pool identity.
	\|-		\|-
	\|		\|

Dgreenwood at 17:51, 10 July 2025

2025-07-10T17:51:29Z

← Older revision		Revision as of 12:51, 10 July 2025
Line 15:		Line 15:

	{\|class="wikitable"		{\|class="wikitable"
			\|-
	\|		\|
	'''Permission'''		'''Permission'''
Line 21:		Line 22:
	\|		\|
	'''Reason'''		'''Reason'''
	\|		\|-
	'''Required?'''		\|colspan=3\|
			'''''Always Required'''''
	\|-		\|-
	\|		\|
Line 31:		Line 33:
	Required for checking user's group membership		Required for checking user's group membership
	* The user installing the Grooper web client must also have the capability to query the domain in order to enter the credentials for the Grooper app pool identity.		* The user installing the Grooper web client must also have the capability to query the domain in order to enter the credentials for the Grooper app pool identity.
	\|
	~~Yes~~
	\|-		\|-
	\|		\|
Line 40:		Line 40:
	\|		\|
	Run the installed applications (Grooper)		Run the installed applications (Grooper)
	\|
	~~Yes~~
	\|-
	\|
	~~C:\Release~~
	\|
	~~Local\NTFS~~
	\|
	~~Run MsBuild for compiling Object Libraries and custom scripts in Grooper~~
	\|
	~~Optional~~
	* Required when implementing Object Libraries or other scripting.
	\|-		\|-
	\|		\|
Line 59:		Line 47:
	\|		\|
	Read and write access to the Grooper file store location		Read and write access to the Grooper file store location
	\|
	~~Yes~~
	\|-		\|-
	\|		\|
Line 68:		Line 54:
	\|		\|
	Read and write access to the Grooper database		Read and write access to the Grooper database
			\|-
			\|colspan=3\|
			'''''Conditionally Required'''''
			\|-
			\|
			C:\Release
			\|
			Local\NTFS
	\|		\|
	~~Yes~~		Run MsBuild for compiling Object Libraries and custom scripts in Grooper
			* Required when implementing Object Libraries or other scripting.
	\|-		\|-
	\|		\|
Line 77:		Line 72:
	\|		\|
	Run services installed via Grooper Command Console		Run services installed via Grooper Command Console
	\|
	~~Optional~~
	* Required if also using the application pool identity as a service account running Grooper services		* Required if also using the application pool identity as a service account running Grooper services
	\|}		\|}
Line 93:		Line 86:
	\|		\|
	'''Reason'''		'''Reason'''
	\|
	~~'''Required?'''~~
	\|-		\|-
	\|		\|
Line 102:		Line 93:
	\|		\|
	Run the installed applications (Grooper)		Run the installed applications (Grooper)
	\|
	~~Yes~~
	\|-		\|-
	\|		\|
Line 111:		Line 100:
	\|		\|
	Read and write access to the Grooper file store location		Read and write access to the Grooper file store location
	\|
	~~Yes~~
	\|-		\|-
	\|		\|
Line 120:		Line 107:
	\|		\|
	Read and write access to the Grooper database		Read and write access to the Grooper database
	\|
	~~Yes~~
	\|-		\|-
	\|		\|
Line 129:		Line 114:
	\|		\|
	Run services installed via Grooper Command Console		Run services installed via Grooper Command Console
	\|
	~~Yes~~
	\|}		\|}

			Other Grooper services may require additional permissions. For example, an Import Watcher's user may need access to directories used for importing file content.
	Other Grooper services may require additional permissions.

Dgreenwood at 17:42, 10 July 2025

2025-07-10T17:42:21Z

← Older revision		Revision as of 12:42, 10 July 2025
Line 15:		Line 15:

	{\|class="wikitable"		{\|class="wikitable"
	~~\|style="width:15%"~~\|		\|
	'''Permission'''		'''Permission'''
	\|		\|