Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

ADImports and Permissions

  Asked By: Tara    Date: Dec 05    Category: Sharepoint    Views: 671

What rights does a service account need in order to perform the ADImport
function within SharePoint. We currently have a service account with
domain administrator rights. We need to tighten this account and give it
only the permission that it requires to do its job. What rights does it
need? Where can I find additional documentation on this function.



2 Answers Found

Answer #1    Answered By: Cade Velazquez     Answered On: Dec 05

It needs read permissions  for the attributes you are importing. It is not making
any changes in the AD.
I can't think of anything that would require any other permissions.

If you were using Microsoft Identity Integration Server (Services?) to populate
the AD with data users manually put into their profiles, then that account  would
need write permissions but only for the attributes you were modifying.

Answer #2    Answered By: Ariana Christensen     Answered On: Dec 05

If a user is given access to a team site via a security group, how is that handled by ADImports. For example, a team site has a preexisting security group listed as reader, so all users within that group can get into a given team site. Then the next day two more users are added to the group, does ADImports update the list that way or is it done through another process?

Didn't find what you were looking for? Find more on ADImports and Permissions Or get search suggestion and latest updates.