Controlling Vault Database Access

Issue

There are occasions during which you will need to prevent access to the Vault for all users. Typically, this would be required when you are performing an upgrade to Vault, performing maintenance tasks such as Purge, or moving the Vault from Server A to Server B. Ideally, you would want to deny users access prior to creating a Vault backup until the Vault maintenance has completed to prevent the inadvertent loss of data should someone post changes during this period. 

So, the question is how do I do this quickly?

There are a few possible solutions that under some circumstances could work.

1.       Turn off IIS. This is Vault's primary communication tool and without it running, users cannot access Vault.

2.       Stop the MS SQL Service for Vault (AutodeskVault). Like IIS, without it running, users cannot access Vault.

While initially, these seem like good solutions, however they may prevent you from being able to perform your tasks that require a functioning Vault.

Solution

The solution is really quite simple, but it does require some upfront effort.

Start by creating a new Vault Group titled “Vault Access”.

We will take advantage of the Vault’s feature that allows users and groups to inherit the settings of the group or groups they are members of. For this solution, we will only assign the Vault database(s) that the members will need access to.

Note: The Vault administrator accounts, or group(s) should not be added to this group. Make sure these accounts have the appropriate Vaults assigned to prevent you from being locked out of your Vaults.

Populating the new group is simply a matter of adding all Vault users to this group. This can be accomplished by adding each user account or adding your existing groups.

For existing environments to finalize the process, you will need to remove the Vault memberships from all of the existing users and groups with the exception of the administrator accounts and/or administrator groups. 

Once this group has been configured and the existing accounts and groups have been updated, you can turn off access by simply toggling the Vault membership setting of the “Vault Access” when you need to perform upgrades or maintenance tasks.

About the Author

Manufacturing Applications Expert<br><br>Hal has been working closely with clients since 1997 to develop and deliver integrated solutions utilizing Autodesk products including AutoCAD, AutoCAD Electrical, AutoCAD Mechanical, Inventor and Vault. His qualifications range from mechanical design engineering to pre-sales and post-sales consulting for the integration of mechanical software solutions. Hal has over 15 years of mechanical design experience in a variety of industry disciplines. He has worked as a Product Design Engineer to design, develop, fabricate and test new surgical instruments for use in Endoscopic and Open Surgery, specific applications for product use include: vessel ligation, wound closure, endoscopic instrumentation and specialty surgical devices. Hal has been awarded two U.S. Patents for medical devices he developed. Additionally during his tenure, Hal developed and maintained Engineering Documentation and CAD Standards and provided CAD product training and support for all users and new hires.

Follow on Linkedin More Content by Hal Carruthers