Run As Profiles and Run As Accounts in Operations Manager 2007
In Operations Manager 2007, Run As Profiles and Run As Accounts are used to select users with the privileges needed for running rules, tasks, and monitors.
Management Pack authors create a rule, task, or monitor, and then associate it with a Run As Profile. The named Run As Profile is imported along with the Management Pack into Operations Manager 2007.
Note
Tasks, rules, and monitors consist of modules that receive credentials or secured data, such as user names and passwords. An administrator must understand the functionality of the modules and use appropriate precautions when sending such data to them.
The Operations Manager 2007 administrator creates a named Run As Account and specifies users and groups. The administrator then adds the Run As Account to the Run As Profile and specifies the target computers that the account should run on.
Note
The credentials you select for the Run As Account must have logon locally rights otherwise the module will fail.
An administrator can associate multiple Run As Accounts with a Run As Profile. This functionality is useful in cases where the Run As Profile is used on different computers and each computer requires a different credential.
For example, Jane has the user rights that enable her to run the task on the first computer running SQL Server. Fred has the user rights that enable him to run the task on the second computer running SQL Server. A separate Run As Account is created for Jane and Fred, and both are associated with the single Run As Profile. The task and the appropriate credentials are pushed to the target computer so that the task can run with either Jane's or Fred's credentials. Account information sent between the Management Server and the target computer is encrypted.
To specify an appropriate account (for example, a least privileged account), you can associate the rules in an unsealed Management Pack with a Run As Profile by editing the properties for the rule. For more information, see How to Edit Properties of a Rule in Operations Manager 2007.