SQL Server permission requirement for MIM Sync

Question

We are setting up a new MIM Sync 2016 R2 server, and we are reviewing the requirements on its SQL Server according to this guide:

https://learn.microsoft.com/en-us/microsoft-identity-manager/install-mim-sync

We cannot find any information about the permission required by MIM Sync to access the SQL Server. A user suggested that "sysadmin" role is required during installation, and can be downgraded to "db_owner" role after installation.

https://github.com/MicrosoftDocs/MIMDocs/issues/193

What's the actual SQL Server permission required to run MIM Sync?

Thank you!

Answer 1

Hello Bill,

The sysadmin permission is required for the account that will install MIMSync, not for the service account itself. All SQL permissions required for the MIMSync service account will be set during the installation.

You will need to remove the sysadmin permission of the install account after the installation. Just remember that you will need it to re-add again for future patch.

Best Regards,

Sylvain