70-332 · Question #23
You are a SharePoint administrator at Litware, Inc. Excel Services is not currently able to load workbooks on the SharePoint site. The Unified Logging Service (ULS) log contains the following error…
The correct answer is D. $wa = Get-SPWebApplication https://portal.litware.com and $wa.GrantToProcessIdentity("LITWARE \svcExcelService"). The Excel Services service account needs minimum read permissions on the content database, which is correctly granted using GrantToProcessIdentity on the web application object.
Question
Options
- A$ssa = Get-SPServiceApplication | where {$_.TypeName -eq "Excel Services Application Web Service Application"} and $ssa.GrantContentDatabasePermissions($WSS_Content_Portal_Content_Database")
- BAdd-SPShellAdmin -Username LITWARE\svcExcelService
- CAdd-SPShellAdmin -Username LITWARE\svcExcelService -Database WSS_Content_Portal_Content_Database
- D$wa = Get-SPWebApplication https://portal.litware.com and $wa.GrantToProcessIdentity("LITWARE \svcExcelService")
How the community answered
(19 responses)- A16% (3)
- B5% (1)
- C21% (4)
- D58% (11)
Why each option
The Excel Services service account needs minimum read permissions on the content database, which is correctly granted using GrantToProcessIdentity on the web application object.
GrantContentDatabasePermissions is not a valid method on an Excel Services service application object in SharePoint PowerShell; this syntax is fabricated and would produce an error.
Add-SPShellAdmin grants administrative access to the SharePoint Management Shell across the entire farm, which far exceeds the minimum permissions necessary for Excel Services to read content databases.
Add-SPShellAdmin with the -Database parameter grants SharePoint Management Shell administrative rights scoped to that database, which is still an administrative privilege and not the read access needed for Excel Services to open workbooks.
The GrantToProcessIdentity method on the SPWebApplication object grants the specified account the SPDataAccess role on all associated content databases, which is the minimum permission required for Excel Services to read workbooks stored in SharePoint. This approach is the supported method for granting a service account access to content databases without excessive privilege escalation.
Concept tested: Granting minimum content database permissions to a service account
Source: https://learn.microsoft.com/en-us/sharepoint/administration/configure-excel-services-in-sharepoint
Topics
Community Discussion
No community discussion yet for this question.