Summary of Required Permissions within DocuWare

Authentication Server

• If events are to be written in the local Windows event log, Authentication Server must have rights to it.
• Write access is required to the DWAuthenticationServer.exe.settings file in the Authentication Server folder, the default location of which is "C:\Program Files\DocuWare".
  (The easiest way of assigning these two rights is to give the user local administrator rights.)
• If Oracle is selected as the database, Authentication Server must run under the same Windows user with which the Oracle client was installed.
• If Windows security settings are being used, this must be a domain user.

Content Server

• If events are to be written in the local Windows event log, Content Server must have rights to it.
• If validation configurations are set up, Content Server needs access to the Validation folder, the default location for which is C:\Program Files\Content Server.
  (The easiest way of assigning these two rights is to give the user local administrator rights.)
• Full Control over all storage locations for documents is required.
• Full Control is required over the temporary directory defined for Content Server in DocuWare Administration.
• Read rights are required to the path for COLD files.
• If an external select list in the form of a file is being used, Content Server needs access rights to this file.
• If a CAS storage location is set up, Content Server needs access to the PEA file.
• If Content Server needs access to directories on the network, the user must be a domain user.
• If Windows security settings are being used, this must be a domain user.
• If Oracle is selected as the database, Content Server must run under the same Windows user with which the Oracle client was installed.

Workflow Server

• If events are to be written to the local Windows event log, Workflow Server must have rights to it. (The easiest way of assigning this right is to give the user local administrator rights.)
• Full Control is required over the temporary directory defined for Workflow Server in DocuWare Administration.
• Full Control is required over the export path defined in DocuWare Administration
• Access rights are required to all paths on which file connections lie (file connection for AUTOINDEX).
• Access rights are required to storage locations of a file cabinet to be added to a DocuWare REQUEST container in Quick Mode.
• The right to run *.exe files in order to start OCR for fulltext is required.
• When a user synchronization with an ACTIVE DIRECTORY is run via Workflow Server, the user under whom Workflow Server runs must be in the same domain as the ACTIVE DIRECTORY.
• If Windows security settings are being used, this must be a domain user.
• If Oracle is selected as the database, Workflow Server must run under the same Windows user with which the Oracle client was installed.
• To burn CDs/DVDs, users must have access to the drive assigned in DocuWare Administration and also have rights to burn CDs/DVDs. (The easiest way of providing these rights is by assigning Windows administrator rights).

Notification Server

• If events are to be written in the local Windows event log, Notification Server must have rights to it.
• Write access is required to the DWNotificationServer.exe.settings file in the Notification Server folder, the default location of which is "C:\Program Files\DocuWare".

Thumbnail Server

• If events are to be written in the local Windows event log, Thumbnail Server must have rights to it.
• Write access is required to the DWThumbnailServer.exe.settings file in the ThumbnailServer folder, the default location of which is "C:\Program Files\DocuWare".

Imaging Server

• If events are to be written in the local Windows event log, Imaging Server must have rights to it.
• Write access is required to the DWImagingServer.exe.settings file in the Imaging Server folder, the default location of which is "C:\Program Files\DocuWare".

SAP HTTP Server

• If events are to be written to the local Windows event log, the server must have rights to it. (The easiest way of assigning this right is to give the user local administrator rights.)
• "Full Control" is required to the temporary directory defined for SAP HTTP Server in DocuWare Administration.
• If Windows security settings are being used, this must be a domain user.

Update Service

• Local administrator rights are required.
• Read and write rights to the setup path are required.

DocuWare Administration

• If DocuWare disks are being created in a jukebox, the user logged into DocuWare Administration must have administrator rights to the server on which Jukebox Manager is installed.

Database Access

• Authentication Server needs access to the DWSYSTEM database table in the system database
• Content Server needs access to the DWDATA database table in the file cabinet database
• Workflow Server needs access to the file cabinet database in order to build a fulltext catalog and add a file cabinet to a DocuWare REQUEST container in Quick Mode.