
My SQL DBAs insist on removing the "sysadmin" permissions from our Dynamics 365 service account (the one we use to deploy). They will only temporarily (and with a great amount of distaste) give back permissions when we perform upgrades (patches from MS).
They say they want a document from Microsoft documenting the SQL permissions required.
All the documentation I have found says that you must give it sysadmin. https://support.microsoft.com/en-us/help/946686/how-to-assign-the-minimum-permissions-to-a-deployment-administrator-in
My concern is whether or not it will be a problem to RUN Dynamics 365 without sysadmin if you have successfully installed already. Is it only required during installation?
Hello Shannon,
Sysadmin is also needed to run Dynamics CRM. Different CRM services will request different SQL permissions. But for Deployment Web Service (CRMDeploymentServiceAppPool Application Pool identity), it will still request Sysadmin permission.
You may check https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/deploy/security-considerations-for-microsoft-dynamics-365 for more permission details of Dynamics CRM.
Thanks