Service Account

Question

I've been using an active directory account with domain admin rights to perform SolarWinds functions. Does this account need domain admin rights, or can I use lower privileges?

mesverrum · Answer

This article gives the best official explanation of how to make a non-admin user for Orion purposes.
https://support.solarwinds.com/SuccessCenter/s/article/How-to-create-a-non-administrator-user-for-SAM-polling

Basically running as a non-admin user is possible, but its kind of a lot of work and you'll find that various monitoring capabilities in Orion might require you to do some experimentation on your own with modifying permissions as needed when things dont work as expected. At clients where they were really strict about the controls but wanted to use every feature it became pretty complicated with us having to set up many service accounts with varying levels of access so they could use the accounts with the least excess permissions whenever possible, and then only escalate to the more privileged accounts for the cases where required features wouldn't work without them.

Seashore · Answer

Depends on what you mean by "solarwinds functions".

If you mean "the account used for polling servers with wmi", yes that is the easiest but not required. That account need to be local admin on all polled server, domain admin is.

Otherwise, please tell us more what you want the account to do.