Required permissions when installing different components of MS Dynamics AX 2012 sorted by components
Before you begin the installation of Microsoft Dynamics AX, work with a system administrator to make sure that the account that you log on with at each server has appropriate permissions. The permissions in the following table are recommended based on the principle of least privilege.
In all cases, you must be a member of the Administrators group on the local computer where you are installing a component. The following table lists the permissions that are required in addition to administrator access on the local computer.
Databases
• Membership in the dbcreator server role in Microsoft SQL Server
• Membership in the securityadmin server role in SQL Server
• Membership in the db_accessadmin database role in SQL Server for the Microsoft Dynamics AX database
If you install the databases remotely from a computer other than the database server, you must log on to the remote computer by using an account that is an administrator on the SQL Server computer. Setup requires access to SQL Server services.
Application Object Server (AOS)
• Membership in the sysadmin role on the instance of SQL Server that you want to connect to
Enterprise Portal for Microsoft Dynamics AX
• Membership in the System administrator role in Microsoft Dynamics AX
• Membership in the Administrators group in Windows on the Web server
• Membership in the Farm Administrators group in Microsoft SharePoint 2010 products
• Membership in the dbcreator role on the instance of SQL Server that is used for SharePoint 2010 products
• Membership in the WSS_Content_Application_Pools database role in the SharePoint_Config database
Enterprise Search
• Membership in the System administrator role in Microsoft Dynamics AX
• Membership in the Administrator group in Microsoft SharePoint Services
• Membership in the dbcreator role on the instance of SQL Server that is used for Microsoft SharePoint Services
Help server
• Membership in the System administrator role in Microsoft Dynamics AX
Management Reporter (server components)
• Membership in the sysadmin role on the instance of SQL Server that you want to connect to.
• To finish the initial configuration of Management Reporter, membership is required in the Administrator role in Management Reporter.
Microsoft SQL Server Reporting Services extensions
• Membership in the System administrator role in Microsoft Dynamics AX
Microsoft SQL Server Analysis Services configuration
• Membership in the System administrator role in Microsoft Dynamics AX
• Membership in the SQL Server securityadmin server role
• Membership in the SQL Server db_owner database role for the Microsoft Dynamics AX database
Web services on Internet Information Services (IIS)
• Membership in the System administrator role in Microsoft Dynamics AX
Synchronization proxy
• Membership in the dbowner database role in the SQL Server database for Microsoft Project Server
• Membership in the System administrator role in Microsoft Dynamics AX
Synchronization service
• Membership in the System administrator role in Microsoft Dynamics AX
Connector for Microsoft Dynamics
• Permission to query for entries in Active Directory. • Membership in the SQL Server dbcreator server role
• Membership in the SQL Server securityadmin server role
• Membership in the sysadmin database role on the SQL Server instance that hosts the Microsoft Dynamics Integration (MSDI) database
VSS writer
• Membership in the Administrators group on the computer where Microsoft System Center 2012 Data Protection Manager (DPM) is installed.
