000031679 - DLP Dashboard reports are not showing and reports not generating on the Enterprise Manager

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000031679
Applies ToRSA Product Set: DLP
RSA Product/Service Type: Data Loss Prevention, Enterprise Manager
RSA Version/Condition: 9.6, 9.6 SP1, 9.6 SP2
Platform: Windows
O/S Version: Windwos 2003 SP2, 2008 R2
 
IssueIssue encountered where dashboard reports, gauges and the Enterprise Manager reports are not generating.
Symptoms observed are the following:
  1. Dashboard reports are not generated in the dashboard tab while accessing Enterprise Manager.
Messages displayed on the gauge section and charts section

  • Unable to generate gauges
  • Unable to generate charts
User-added image


Error observed in the Enterprise Manager log - em.log

DD MMM YYYY hh:mm:ss,xxx | ERROR - DataSourceErrorReporterImpl.reportError(68) | SQLServerException: Cannot execute as the database principal because the principal "reports_user" does not exist, this type of principal cannot be impersonated, or you do not have permission.
DD MMM YYYY hh:mm:ss,xxx | ERROR - DataSourceErrorReporterImpl.reportError(69) | Vendor Code: 15517
DD MMM YYYY hh:mm:ss,xxx | ERROR - DataSourceErrorReporterImpl.reportError(70) | SQL State: S0001
DD MMM YYYY hh:mm:ss,xxx | DEBUG - DataSourceErrorReporterImpl.reportError(74) | Root Cause for Debug: 
com.microsoft.sqlserver.jdbc.SQLServerException: Cannot execute as the database principal because the principal "reports_user" does not exist, this type of principal cannot be impersonated, or you do not have permission.


  1. Enterprise Manager reports are not generated in the dashboard tab while accessing Enterprise Manager. 
Message displayed on the report section, appears to hang and does not displaying the report

  • Generating report ...
User-added image
Error observed in the Enterprise Manager log - em.log


DD MMM YYYY hh:mm:ss,xxx | ERROR - ReportsRecoverableDataSource.getConnection(36) | Error occurred while trying to set the context of the reports connection: 
com.microsoft.sqlserver.jdbc.SQLServerException: Cannot execute as the database principal because the principal "reports_user" does not exist, this type of principal cannot be impersonated, or you do not have permission.

 


 
CauseThese are possible causes where dashboard charts and gauges are not generated with the following error:
Error observed in the Enterprise Manager log - em.log
SQLServerException: Cannot execute as the database principal because the principal "reports_user" does not exist, this type of principal cannot be impersonated, or you do not have permission.

  • The reports_user doesn't exist in Enterprise Manager database
  • Permission for reports_user had been changed in Enterprise Manager database
Normally this report_user should be present on the Enterprise Manager database. Below is an example where the users exists.
User-added image
Resolution1. Pre-check on Enterprise Manager database - RSA_DLP_EM
  1. Expand RSA_DLP_EM database
  2. Expand Security
  3. Expand Users
  4. Check and confirm if reports_user exists
  5. This will help confirm if this is due to missing reports_user or permission issue on the reports_user
2. Run SQL Script to re-create reports_user. 
Important Note: The attached SQL script have pre-check built-in to verify if the reports_user exists. And the script will remove reports_user's permission, remove reports_user's account if present and proceed to re-create the reports_user with the proper permission assigned.
  1. Stop Enterprise Manager service
  2. Backup of database prior to the changes
  3. Run the attached script to start the process of re-creating reports_user on Enterprise Manager - DLP_reports_user_creation.txt

Attachments

Outcomes