Skip to main content

It seems I have a misconception on how FME should access external resources like databases and CSV files. We have a default setup meaning the FME services run as Local System. It doesn't appear there is a way to assign permissions at the workspace level. For instance, Workspace1 is run by domain account X, Workspace2 run by domain account Y, etc. Changing the services to run as a domain account wouldn't provide separate Workspace security to file shares and databases.

How should we provide access to external resources like a CSV on a network share or a database? Is the standard to copy files to the FME server and use SQL Authentication? Any thoughts would be appreciated.

What I've done is have FME server running the service as a domain account with all necessary accesses, but have the different workspaces in separate repositories and set up different role profiles for each repository.

So even though FME server is using a super domain account, when the user X logs in, they only have access to workspaces in repository X.

On the desktop level, when accessing databases, I've created published parameters for the username/password.


For files you could use the Resources menu in FME server. You can store the required source files on FME server and avoid network communication by the FME server account.


Reply