Installing CRM 2011 without the sysadmin and local admin SQL roles??

(0) Share

Report

Posted on by Community Member

Hi.

I'm working on installing CRM in a very secure enviroment. I do not have access to domain admin or SQL sysadmin.

I am planning to use a scripted XML install. Service accounts,groups and OU have been created and crmadmin account has full controll over the CRM OU.

I have gotten the SQL team to created the Databases, and the roles on the SQL server.

It is possible to install CRM with out local admin and sysadmin on the SQL server at all? I know it would be easier to have the right access roles but the SQL team is VERY strict in this system.

Has anyone tired with out the sysadmin and local admin role on the SQL server and got it to work.

Thanks in advanced.
Sveinung

Norway.

*This post is locked for comments

I have the same question (0)

All responses (7)

Answers (0)

Community Member on at

Like (0)

Report

RE: Installing CRM 2011 without the sysadmin and local admin SQL roles??

Well this is a old post and i have gotten some experience after this install.

Sysadmin is not realy required but Sercurity admin and DB create with local admin on the SQL server will lett you install.
(local admin realy only needed for the SQL agent registration).

You do need to be granted owner on the DB's you create and on the SSRS DB's.
In the day to day operations for the crm admin you dont need sysadmin but it does help when optimizing CRM and working with indexes.

We try to allways keep rights to a minimum and after install we always remove sysadmin if we are granted the role under install.

IT does help having sysadmin when adding more CRM deployment admin users but other thant that the role is not needed when administrating crm.

.

Was this reply helpful? Yes No
dp_777 10 on at

Like (0)

Report

RE: Installing CRM 2011 without the sysadmin and local admin SQL roles??

sysadmin may be required to install CRM, for now let's accept that (well I have accepted it!)

The question I have is whether sysadmin role is required for normal CRM operation (i.e. the CRM user)??

My CRM administrator has asked for this user to be granted sysadmin role - this is really due to lack of knowledge with CRM roles and not knowing whether sysadmin is really necessary.

Nobody in my department knows the answer - I'm hoping someone out there can shed some light??

thanks in advance

Dipak

Was this reply helpful? Yes No
RobN 5 on at

Like (0)

Report

RE: Installing CRM 2011 without the sysadmin and local admin SQL roles??

I am in the same position as Dipak and Sveinung. The actual set of minimal permissions required should be obtainable if Microsoft tested and defined them. By granting sysadmin to the account they are going against their own best practices. Granting sysadmin is just the lazy way out. I doubt Dynamics ever needs to adjust instance configurations, restore databases, alter endpoints, kill connections, shut down the instance, etc.

Was this reply helpful? Yes No
Mohammad Atif on at

Like (0)

Report

RE: Installing CRM 2011 without the sysadmin and local admin SQL roles??

We need an account (login) in sql that have permission to create a database that account may ir not be a crm user.does that makes sense?

Thanks,

Mohammad

Was this reply helpful? Yes No
dp_777 10 on at

Like (1)

Report

RE: Installing CRM 2011 without the sysadmin and local admin SQL roles??

Hi all, reading this thread I accept that admin privileges are required for installing CRM 2011.

I am a SQL Server DBA and am looking to define privileges for the normal CRM operation (i.e. after installation).

The articles seem to suggest that admin (sysadmin) privileges are required after operation too (e.g. for new database creations). As a DBA I am naturally concerned and hesitant to assign these privs, which would allow access for the CRM administrator to perform any operation on the database server.

Does anyone know of any granular privileges which can be assigned instead, e.g. create database role, etc?

thanks

Dipak

Was this reply helpful? Yes No
Mohammad Atif on at

Like (0)

Report

Re: Installing CRM 2011 without the sysadmin and local admin SQL roles??

Please refer the folwojng social.technet.microsoft.com/.../3176.how-to-install-microsoft-dynamics-crm-2011.aspx for what ever you are trying to do this installation.

Was this reply helpful? Yes No
Suggested answer

Gus Gonzalez 27,113 on at

Like (2)

Report

Re: Installing CRM 2011 without the sysadmin and local admin SQL roles??

No.

It will not work.

The installation process creates Databases in SQL and Groups in Active Directory, since the user doesn't have any permissions, this will fail.

I remember dealing with I.T. teams that were "VERY strict" and didn't want to give me access...I would just say "Well, these are minimum requirements so are you telling me you don't want CRM installed?".

They are called Minimum Requirements for a reason.

You can always offer to perform the installation as a team (I.E. With them or their account) so they can see what nothing is out of bounds.

I've noticed that even the most strict security gives up when you answer all their questions and involve them in the process.

Good Luck!

Was this reply helpful? Yes No