You are on page 1of 22

SCOM 2012 R2 Account Matrix v1.

0
Account
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SCOM Install
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config

SDK/Config

SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config
SDK/Config

Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account
Account

Management
Management
Management
Management
Management

Server
Server
Server
Server
Server

Action
Action
Action
Action
Action

Management
Management
Management
Management
Management
Management
Management
Management
Management
Management
Management
Management
Management
Data Reader
Data Reader
Data Reader
Data Reader
Data Reader
Data Reader

Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server

Action
Action
Action
Action
Action
Action
Action
Action
Action
Action
Action
Action
Action

Data
Data
Data
Data

Reader
Reader
Reader
Reader

Data Reader
Data Reader
Data Reader

Data Reader
Data Reader
Data Reader
Data Reader
Data Reader
Data Writer
Data Writer

Data
Data
Data
Data
Data
Data
Data
Data
Data
Data
Data
Data

Writer
Writer
Writer
Writer
Writer
Writer
Writer
Writer
Writer
Writer
Writer
Writer

Data Writer

Data Writer
Data Writer
Data Writer
Operations Manager
Administrator accounts or groups
included in OpsMgr
Administrations Security Role as
well.
The highlighted information for this
context refers to the bare minimum
previleges that this type of accounts
would have.
The real requirements should be
reviewed against expected
capabilities of this type of accounts.

2 Account Matrix v1.0


Context Description
SCOM Management Server
SERVER hosting OperationsManager database
SERVER hosting OperationsManagerDW database
SERVER hosting SSRS Reporting database
SERVER hosting SSRS Instance
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database
SCOM Management Server
SERVER
SERVER
SERVER
SERVER

hosting
hosting
hosting
hosting

OperationsManager database
OperationsManagerDW database
SSRS DB
SSRS Instance

SQL Server hosting OperationsManager database

SQL Server hosting OperationsManagerDW database


SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database

SCOM Management Server


SERVER hosting OperationsManager database
SERVER hosting OperationsManagerDW database
SERVER hosting SSRS DB
SERVER hosting SSRS Instance

SQL Server hosting OperationsManager database


SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database
SCOM Management Server
SERVER hosting OperationsManager database
SERVER hosting OperationsManagerDW database
SERVER hosting SSRS DB
SERVER hosting SSRS Instance
SQL Server hosting OperationsManager database

SQL
SQL
SQL
SQL

Server
Server
Server
Server

hosting
hosting
hosting
hosting

OperationsManagerDW database
SSRS DB
OperationsManager database
OperationsManagerDW database

SQL Server hosting SSRS DB


SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database

SQL Server hosting SSRS DB


OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database
SCOM Management Server
SERVER hosting OperationsManager database

SERVER hosting OperationsManagerDW database


SERVER hosting SSRS DB
SERVER hosting SSRS Instance
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB

OperationsManager database

Operations ManagerDW database


SSRS Reporting Database
SSRS Reporting_Temp Database

SCOM Management Server


SCOM Gateway Management Server
SCOM Web Console Server
SCOM Audit Collector Management Server
SERVER hosting OperationsManager database
SERVER hosting OperationsManagerDW database
SERVER hosting SSRS DB
SERVER hosting SSRS Instance
SERVER hosting OperationsManagerAC database
SERVER hosting OperationsManagerAC database
SCOM Web Site
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManagerAC database
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManagerAC database
SQL Server hosting OperationsManager database
SQL Server hosting OperationsManagerDW database
SQL Server hosting SSRS DB
SQL Server hosting OperationsManagerAC database

OperationsManager database
Operations ManagerDW database
Operations ManagerAC database
SSRS Reporting Database
SSRS Reporting_Temp Database

Context Type
Windows
Windows
Windows
Windows
Windows
SQL Instance
SQL Instance
SQL Instance
SQL Master database
SQL Master database
SQL Master database
SQL MSDB database
SQL MSDB database
SQL MSDB database
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database

OS Administrative Rights
Local Admin
Local Admin
Local Admin

Windows

Local Admin

Windows
Windows
Windows
Windows

SQL Instance

SQL Instance
SQL Instance
SQL Master database
SQL Master database
SQL Master database
SQL MSDB database
SQL MSDB database
SQL MSDB database
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database

Local Admin

Windows
Windows
Windows
Windows
Windows

SQL Instance
SQL Instance
SQL Instance
SQL Master database
SQL Master database
SQL Master database
SQL MSDB database
SQL MSDB database
SQL MSDB database
OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database
Windows
Windows
Windows
Windows
Windows
SQL Instance

SQL
SQL
SQL
SQL

Instance
Instance
Master database
Master database

SQL Master database


SQL MSDB database
SQL MSDB database

SQL MSDB database


OperationsManager database
Operations ManagerDW database
SSRS Reporting Database
SSRS Reporting_Temp Database
Windows
Windows

Local Admin

Windows
Windows
Windows
SQL Instance
SQL Instance
SQL Instance
SQL Master database
SQL Master database
SQL Master database
SQL MSDB database
SQL MSDB database
SQL MSDB database

OperationsManager database

Operations ManagerDW database


SSRS Reporting Database
SSRS Reporting_Temp Database

Local Admin
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
IIS Application Pool
SQL Instance
SQL Instance
SQL Instance
SQL Instance
SQL Master database
SQL Master database
SQL Master database
SQL Master database
SQL MSDB database
SQL MSDB database
SQL MSDB database
SQL MSDB database

Local Admin
Local Admin
Local Admin

OperationsManager database
Operations ManagerDW database
Operations ManagerAC database
SSRS Reporting Database
SSRS Reporting_Temp Database

User Security Rights Assignment SQL Role rights


Debug Programs

SA
SA
SA

Logon as a service
Generate Security Audits

Public

Public

Public

Logon Locally

Public
Logon as a service

Public

Public

Logon Locally

Public
Public

Public
Public
SA
Public

SQL User Mapping rights

N/A (SA)
N/A (SA)
N/A (SA)
N/A (SA)

ConfigService
db_accessadmin
db_datareader
db_datawriter
db_ddladmin
db_securityadmin
public
sdk_users
sql_dependency subscriber
apm_datareader
db_datareader
OpsMgrReader
public

Specific Context Type rights

db_datareader
db_datawriter
db_ddladmin
dbmodule_users
public

apm_datareader
db_datareader
OpsMgrReader
public

public
RSExecRole

public
RSExecRole
SQLAgentOperatorRole
SQLAgentReaderRole
SQLAgentUserRole

db_owner
public
RSExecRole
db_owner
public
RSExecRole

apm_datareader
apm_datawriter
db_datareader
dwsynch_users
public
apm_datareader
apm_datawriter
db_owner
OpsMgrWriter
public

apm_datareader
apm_datawriter
db_datareader
dwsynch_users
public
apm_datareader
db_datareader
public
db_datareader
public
db_owner
public
db_owner
public

2013.05.02

V1.0
Initial release which includes some information ported from Kevin Holman's blog as well.

You might also like