Contact your system administrator for assistance before modifying file permissions on your servers or workstations. Direct your company’s IT to review your application server and verify the correct configuration settings.

Files:

• Sage Paperless Files:
  • Sage Paperless Construction folder and share:
  • The path depends on where it was set up and can be determined in the SPC Dashboard. The Default location used in the Setup Guide is C:\Sage Paperless Construction\
  • Deployment Folder Paths:
    These paths are defined during setup and are visible on the SPC Dashboard under the Deployment tab. In the corresponding fields for Client Deployment, Job Poll Deployment Path, Reports Deployment, Cloud Deployment.
  • Documents directory:
    The Vault Properties specifies the Document Directory. To view the Documents open Paperless, go to Administration Vaults; it will be on the General tab in the Production Folder field.
• Sage 300 Construction and Real Estate server, this may be on the same server as Sage Paperless Construction or on a different server in the domain:
  • C:\ProgramData\Sage\Timberline Office folder and related share
  • Data location folder and related share (this path will vary depending on where the accounting data is stored)
• Sage 100 Contractor server:
  • Data location folder and related share (generally the Sage100Con folder/share)

Permissions requirement by user type

Below is a list of permissions required for different accounts or groups for each file needed for Paperless.

Domain Services and Administrator Accounts:
Administrator accounts used for installations and upgrades and the Domain Services used to run the services need to have the following permissions.

• Run all our services (Application, Job Poll, and Web) as the same Domain service account.
• Recommended account settings (not required):
  • Password set to never expire.
  • If you have a company policy that prohibits the non-expiration of passwords, services will stop running after reboot once the password expires
    Note: You can enter a new password from the services.msc menu.
  • Account set so the user cannot change the password
• The Domain Service and Administrators account must have full control permissions for the Paperless share
• The Domain Service and Administrators account must have full control of NTFS permissions for the Paperless directory
• If you are in a multi-server environment, your Domain Service Account must be able to see all servers in your configuration
• Windows Temp Folder:
  When performing updates Temp folder is required. The Update package downloads and extracts in the Temp folder during updates.

Standard Users:
Users running the Sage Paperless Construction Client application require the following permissions.

• Your standard Domain user accounts don’t need NTFS permissions to the Paperless directory.
• Your standard Domain user accounts need read-only access to the Paperless winclient directory at the share level. (\\%servername%\Sage Paperless Construction\deployment\winclient)
• Ensure your standard user accounts have read-only access to the pVault client setup at the share level. (\\%servername%\Sage Paperless Construction\deployment\client setup\)
• Ensure your standard user accounts have read-only access to the Addins directories in Server Files at the share level. (\\%servername%\Sage Paperless Construction\deployment\Server Files\)
• Ensure your standard user accounts have read-only access to the pVault Application Server Config. (\\%servername%\Sage Paperless Construction\deployment\server files\config\peserverconfig.xml)
• Ensure your standard user accounts have read-only access to the pVault Reports Directory at the share level. (\\%servername%\Sage Paperless Construction\deployment\reports)
• If using Attachment Sync, Standard Users also require Read permissions to the attachment sync base path and subdirectories.
  This path can be located as follows:
  1. Click the Sage Paperless Construction Administration tab.
  2. Under Job Poll, select Sage 300 CRE Attachment Sync or Sage 100 Attachment Sync, as applicable.
  3. On the right of the Job Poll Configuration window,  under Job Information, in the section labeled "Parameters", the Base Path will display

SQL Local Service Account:
Ensure that the local service account running your SQL server (usually NT Service\MSSQL$SAGEPAPERLESS) has full NTFS permissions to the database directory and backup database directory. (Default location C:\Sage Paperless Construction\database)

1. On the server open Windows Explorer.
2. Navigate to the location of your Sage Paperless Construction Database folder.
3. Right-click and select Properties.
4. Select Security.
5. Click Edit.
6. Add the user "NT SERVICE\MSSQL$SAGEPAPERLESS".
   Note: This is the account configured with the default installation. If your IT has set a different instance name, you will need to consult with them for the correct service account.
7. Click OK.
8. Click OK.
   Note: If you have assigned the backup job poll to use another location for backups, repeat the steps above for the backup folder.

Sage 300 Construction and Real Estate and Sage Estimating Required Windows Permissions

How do I determine what the permissions are for a registry key?

Sage Paperless Construction: Setup Guide

Sage Paperless Construction: Firewall Exceptions

What Sage Paperless Construction files and folders should I exclude from my antivirus software scan?

Required Windows Permissions for Sage 100 Contractor (SQL) version 20 or later