can we add report server service account, server configuration account to cyberark in order to change the password for every 30days and will it get updated automatically without any issues and services will be up after these changes.

Thakur, Sumana 0 Reputation points

Hi All,

As per Account onboarding and remediation effort for Active Directory privileged accounts, we need to add service accounts to the CyberArk so that password will be updated for every 30 days. we have tried to update it in development environment earlier, but the application services were down for longer duration, and it impacted the business partners. can we add the accounts to CyberArk without effecting the application.

  1. Report Server Service Accountreportserver.PNG

2)Server Configuration accountserverconfig.PNG

please find the attachment of images and suggest me to proceed further.



Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
16,693 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Thakur, Sumana 0 Reputation points

    Hi Revilla,

    Thank you for your response, please find the details below:

    These accounts do not have dependency on Azure AD, but We are using one domain account as the service account for Azure DevOps Server (Server Configuration Account) which is (TFSServiceAccount)and the data sources account for SQL Server Reporting Services (Report Server Service Account) which is (TFSReportsAccount) 


    Both these accounts has full control as admin on the servers (application tier and data tier) and they run below services on both tiers.


    Service name
    Code Coverage Service
    Azure DevOps Server Web Services
    SQL Server Reporting Services (MSSQLSERVER or InstanceName if using a named instance)
    Report Web Service
    Visual Studio Team Foundation Build Service Host (if Team Foundation Build is installed)
    Visual Studio Team Foundation Background Job Agent
    Visual Studio Test Controller
    Visual Studio Test Agent
    Analysis Server (MSSQLSERVER or InstanceName if you are using a named instance)
    SQL Server Browser
    SQL Server (MSSQLSERVER or InstanceName if using a named instance)
    SQL Server Agent (MSSQLSERVER or InstanceName if using a named instance)
    Account Service (CollectionName)


     If we try to make any changes to the existing accounts passwords, all services will be down.


    Is it recommended to change password of these accounts for every 30 days time period?


    If it is recommended to do so, what steps we need to follow to update the password and make sure all services are up and running without affecting the existing environment.

    please let me know about it.

    Thank you for your support and coordination.



    0 comments No comments