25,080 questions
Just that. No O/S permissions required for the SQL Server
SQL Service Account Permission Needed for Azure AD Connect
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELC%3C/text%3E%3C/svg%3E)
Lim Chong Sun
531
Reputation points
I am going to setup a new Azure AD Connect connecting to a full SQL.
Naturally, the SQL will be managed by a service account. I will not be using a group managed service account (gMSA).
I need to create the service account with just enough privilege.
What is the OS and SQL permissions required?
I searched the web, I can only find it needs to have the following SQL permissions:
- SQL Login
- database owner(dbo) rights to ADSync database
What the OS permissions?
https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?view=sql-server-ver15
Is it just this?
Microsoft Security | Microsoft Entra | Microsoft Entra ID
1 answer
Sort by: Most helpful
-
Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator2020-11-20T12:21:49.177+00:00 -
Lim Chong Sun 531 Reputation points
2020-11-23T02:33:42.147+00:00 The SQL service account do not require any OS permissions on the SQL server or AAD Connect server? Not even log in as a service?
Sign in to comment -