Kevin Holman's OpsMgr Blog

Thanks for the effort of putting the permissions account document together, I mentioned before to C.Fox that his doc is lacking these details.

I just wanted to add my 2 cents here:

You should probably include in the doc account's system permissions.

For example:

Data reader account on the reporting server needs:

Logon as a Batch Job and Logon as a Service privileges.

SDK account requires the same priveleges on the RMS server.

Data Writer Logon as a Service on the reporting.

Don't quote me on these. Just verify the roles exactly, I am not sure regarding whether data wareshouse account provileges needed on the reporting db server or on the server where SSRS installed if separate. (in my environment these  roles isntalled on the same server, so I can' t really clarify)...

PaVel

This is exactly what DBA's have been asking for.  Thanks man!

-Jess

Excellent, thank you very much, highly appreciated!

Is it possible to include Pavel's recommendations in version 2.0 of your Matrix?

Kevin,

It's about time.. Jesus.  Can you be any slower? ;-)

Hugs and kisses,

Blakey poo

There has always been a bit of confusion on when to run the DBCreateWizard.exe tool, or when to just

Outstanding work on the spreadsheet - its a shame that its so difficult to implement good practices like separating databases from applications.  I've been fighting this for a few weeks and I really appreciate why they suggest to take the shortcut and just install it all on one box.  Good on ya Kevin!

Great 10x,

A good addition to the document would be to add the Permissions required for popular MPs like the ADMP and the Exchange ones...

What about R2? I was reading the "SDK and config" account is now called the Data Access Service account. Can I safely replace "SDK and config" with Data Access Service account on the spreadsheet to be complient with R2?

Thanks,

Stephen