cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Highlighted
Level 8

Service Accounts and "least rights"

Jump to solution

I am looking for documentation on the "least rights" that the

SolarWinds services accounts need. They want all services accounts for

SolarWinds removed for the Domain Admin Group, unless we can show why they

need to be in the group.

1 Solution

Accepted Solutions
Highlighted

Re: Service Accounts and "least rights"

Jump to solution

It depends on which modules you are using and which features, but the specifics are documented in the admin guides for every module

A pretty typical minimum for server monitoring would be as shown here:
How to create a non-administrator user for SAM polling - SolarWinds Worldwide, LLC. Help and Support

IPAM adds in some complexities if you are polling dhcp/dns on domain controllers, and depending on how you have vcenter permissions configured there could be some factors to consider with VMAN as well. 

- Marc Netterfield, Github

View solution in original post

2 Replies
Highlighted

Re: Service Accounts and "least rights"

Jump to solution

It depends on which modules you are using and which features, but the specifics are documented in the admin guides for every module

A pretty typical minimum for server monitoring would be as shown here:
How to create a non-administrator user for SAM polling - SolarWinds Worldwide, LLC. Help and Support

IPAM adds in some complexities if you are polling dhcp/dns on domain controllers, and depending on how you have vcenter permissions configured there could be some factors to consider with VMAN as well. 

- Marc Netterfield, Github

View solution in original post

Highlighted
Level 17

Re: Service Accounts and "least rights"

Jump to solution

What Orion apps do you have installed and what general items are you trying to monitor? For most needs you may not need a domain admin if your devices are setup to allow your Orion system to monitor.

A few points for reference;

If using SAM, for Non Admin Account Setup - How to create a non-administrator user for SAM polling - SolarWinds Worldwide, LLC. Help and Support

For IPAM, monitoring DNS with Non Admin - Grant non-domain administrator account rights for IPAM DNS Monitoring - SolarWinds Worldwide, LLC. H...

If you are running HA - Required DNS Permissions to set up a High Availability Pool and access Microsoft DNS - SolarWinds Wo...

Let me know if there is something other than what I have listed here, we can find it!

-CharlesH

Loop1 Systems: SolarWinds Training and Professional Services

0 Kudos