Showing posts with label Service Account Model. Show all posts
Showing posts with label Service Account Model. Show all posts

Tuesday, August 20, 2013

Least Privilege Service Account Model for SharePoint 2013

The Below user accounts are based on the Least Privilege Account Model.

     Naming Format: svc_p_<FarmName>_<serviceName>
Generally _p_ indicates production, _d_ indicates development, _u_ indicates UAT.


SL. NO
Account Name
Description
Local Permissions
Account Type
SQL Server Accounts
1
SQL_Admin_<SQL ServerName>
Setup Account: The account which is used to Install the Software.
Box\Machine Admin,
Domain Account
2
SQL_Service_<SQL ServerName>
Service Account: The account which is used to run the Services.
N.A/ Login as Service & log in as Batch
Domain Account
SharePoint Accounts
3
Svc_p_<Farm Name>_adm
Setup Account: The account which is used to Install the Software.
Box\ Machine Admin & “Database Creator” & “Security Admin” roles on SQL Box
Domain Account
4
Svc_p_<Farm Name>_wApp
Web Application Pool Account: Service account for configuring the Web Application App pools
Login as Service & log in as Batch
Domain Account
5
Svc_p_<Farm Name>_sApp
Service Application Pool Account: Service account for configuring the Service Application App pools
Login as Service & log in as Batch
Domain Account
6
Svc_p_<Farm Name>_mApp
My Site Host Web Application Pool Account: Service account for configuring the Web Application App pool of my sites host
Login as Service & log in as Batch
Domain Account
7
Svc_p_<Farm Name>_Farm
Farm Account: Central Administration Application pool Account
Login as Service & log in as Batch
Domain Account
8
Svc_p_<Farm Name>_ca
Content Access Account: Account used for Crawling the content in the farm.
Login as Service & log in as Batch
Domain Account
9
Svc_p_<Farm Name>_UP
Profile Import Account:
“Replicate Directory Changes” permission on Domain.
Login as Service & log in as Batch
Domain Account
10
Svc_p_<Farm Name>_WF
Workflow Run As Account
Login as Service & log in as Batch
Domain Account
11
Grp_p_<Farm Name>_WF
Farm Workflow Group

Domain Group