SharePoint 2010, PowerPivot 2012 Data Refresh Permissions

Hi Everyone,

I am writing this because I am little confused by what I needed to do to get the Data Refresh working.

The environment consists of SharePoint 2010 with SP2, PowerPivot 2012 SP1 CU7, SSRS, 2012 SP1 CU7, SSAS 2012 SP1 CU7 and SQL Server 2012 SP1 CU7. The environment is divided in to multiple servers:

• 2x WFE (SP2010)
• 1x APP (SP2010 / Search)
• 1x APP (SP2010 / SSRS 2012)
• 1x APP (SP2010 / PowerPivot 2012 / Excel Services)
• 1x SSAS 2012
• 2x SQL Server (1 for SP2010 / 1 for Dataware House)

1. I am using a Service Account called (svcSPPowerPivotApp) for PowerPivot
2. I am using a Service Account called (svcSPFarm) for Farm
3. I am using a Service Account called (svcSPExcel) for Excel Services
4. I am using a Service Account called (svcSPSSRS) for Reporting Services
5. I am using a Service Account called (svcSPAppPool) for Application Pool
6. I am using a Service Account called (svcSPC2WTS) for Claims to Windows Token Service
7. I am using an account called (admSPAndre) and is Admin on PowerPivot Analysis Services, Farm Administrator, Local Admin, etc

I created an Target Application within Secure Store Service called DataRefresh according the documentation Link. When I configure the Data Refresh with "The data refresh schedule is disabled because another user has updated the PowerPivot workbook". So I validated the documentation with this page:Link. Still it didn't work.

I always used my own account for that, So it has the following permissions:

Is Target Application Administrator, is Target Application Member, is configured as the owner of the Target Application, Is Secure Store Service Application Administrator, has Farm Permissions, is on each local box Local Admin.

I added the svcSPPowerPivotApp as Target Application Administrator, Target Application members, is configured as the owner of the target application. Is Secure Store Service Application permissions and is on each box local admin.

So I've tried something else: I have added "<domain>\domain users" as Target Application Administrator and Target Application Member. And from that moment off it did work! Is there a definitive guide on which permissions are necessary to work with PowerPivot, because even you when you're god of the environment I still did get the messages. When adding Domain Users as Admin and Member of the Target Application I could enable the Data Refresh schedule.

What am I missing here?

Thanks