I am looking for documentation on the "least rights" that the
SolarWinds services accounts need. They want all services accounts for
SolarWinds removed for the Domain Admin Group, unless we can show why they
need to be in the group.
It depends on which modules you are using and which features, but the specifics are documented in the admin guides for every module
A pretty typical minimum for server monitoring would be as shown here:
How to create a non-administrator user for SAM polling - SolarWinds Worldwide, LLC. Help and Support
IPAM adds in some complexities if you are polling dhcp/dns on domain controllers, and depending on how you have vcenter permissions configured there could be some factors to consider with VMAN as well.
What Orion apps do you have installed and what general items are you trying to monitor? For most needs you may not need a domain admin if your devices are setup to allow your Orion system to monitor.
A few points for reference;
If using SAM, for Non Admin Account Setup - How to create a non-administrator user for SAM polling - SolarWinds Worldwide, LLC. Help and Support
For IPAM, monitoring DNS with Non Admin - Grant non-domain administrator account rights for IPAM DNS Monitoring - SolarWinds Worldwide, LLC. Help and Support
Let me know if there is something other than what I have listed here, we can find it!
Loop1 Systems: SolarWinds Training and Professional Services
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.