This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Service Account

FormerMember
FormerMember

I've been using an active directory account with domain admin rights to perform SolarWinds functions. Does this account need domain admin rights, or can I use lower privileges?

  • Depends on what you mean by "solarwinds functions".

    If you mean "the account used for polling servers with wmi", yes that is the easiest but not required. That account need to be local admin on all polled server, domain admin is.

    Otherwise, please tell us more what you want the account to do.

  • This article gives the best official explanation of how to make a non-admin user for Orion purposes.
    https://support.solarwinds.com/SuccessCenter/s/article/How-to-create-a-non-administrator-user-for-SAM-polling

    Basically running as a non-admin user is possible, but its kind of a lot of work and you'll find that various monitoring capabilities in Orion might require you to do some experimentation on your own with modifying permissions as needed when things dont work as expected. At clients where they were really strict about the controls but wanted to use every feature it became pretty complicated with us having to set up many service accounts with varying levels of access so they could use the accounts with the least excess permissions whenever possible, and then only escalate to the more privileged accounts for the cases where required features wouldn't work without them.