Friday, March 05, 2010

SharePoint administration user accounts (MOSS and SP 2010)


Account
Account Name
Scope
Used By
Needed at
Requirements
Install AccountDOMAIN\SVCMossSetupFarmPerson InstallingSetupMember of the administrator group on each Web front-end (WFE) server and application server computer in the farm. Member of the following SQL Server groups with SQL Security administrator and database creator rights on SQL servers.
Farm Administrator AccountDOMAIN\SVCMossFarmAdminFarmCentral administration site application pool identitySetupMember of administrators group on each WFE server and application server computer in the farm with SQL security administrator and database creator rights on SQL Servers. Database Owner (DBO) for all databases and additional permissions on WFE server and application server computers are automatically configured for this account when SharePoint is installed.
SSP Admin Process AccountDOMAIN\SVCMossSSPAdminFarmSSP Timer service; SSP Web services SSP App Pool IdentitySSP CreationNo configuration is necessary. The following permissions are automatically configured for this account when SharePoint is installed: DBO for the Share Service Provider (SSP) content database, read/write permissions for the SSP content database, read/write permissions for content databases for Web applications that are associated with the SSP, read permissions for the configuration database, read permissions for the central administration content database, and additional permissions on WFE server and application server computers.
Crawl / Content Access AccountDOMAIN\SVCMossCrawlFarmWindows SharePoint Services 3.0 Search serviceSSP CreationMust be a domain account, but must not be a member of the farm administrators group. Permissions automatically configured for this account when SharePoint is installed include the following: read/write permissions for content databases for Web applications, read permissions for the configuration database, and read/write permissions for the Windows SharePoint Services Search database.
Content AccountDOMAIN\SVCMossContentAppWeb ApplicationsApp Pool CreationNo configuration is necessary. SQL Server privileges that are automatically assigned to this account are member of Database Owners Group for content databases associated with the Web application, read/write access to the associated SSP database only, and read permission for the configuration database. Additional privileges for this account on WFE servers and application servers are automatically configured by SharePoint.

No comments: