Verify that you have the required permissions for installation

  • Article

Important

This content is archived and is not being updated. For the latest documentation, see Microsoft Dynamics 365 product documentation. For the latest release plans, see Dynamics 365 and Microsoft Power Platform release plans.

Applies To: Microsoft Dynamics AX 2012 R3, Microsoft Dynamics AX 2012 R2, Microsoft Dynamics AX 2012 Feature Pack, Microsoft Dynamics AX 2012

Before you begin the installation of Microsoft Dynamics AX, work with a system administrator to make sure that the account that you log on with at each server has appropriate permissions. The permissions in the following table are recommended based on the principle of least privilege.

In all cases, you must be a member of the Administrators group on the local computer where you are installing a component. The following table lists the permissions that are required in addition to administrator access on the local computer.

Component

Additional permissions that are required to install the component

Databases

  • Membership in the dbcreator server role in Microsoft SQL Server

  • Membership in the securityadmin server role in SQL Server

  • Membership in the db_accessadmin database role in SQL Server for the Microsoft Dynamics AX database

If you install the databases remotely from a computer other than the database server, you must log on to the remote computer by using an account that is an administrator on the SQL Server computer. Setup requires access to SQL Server services.

Application Object Server (AOS)

Membership in the sysadmin role on the instance of SQL Server that you want to connect to

Enterprise Portal for Microsoft Dynamics AX

  • Membership in the System administrator role in Microsoft Dynamics AX

  • Membership in the Administrators group in Windows on the Web server

  • Membership in the Farm Administrators group in Microsoft SharePoint 2010 products

  • Membership in the dbcreator role on the instance of SQL Server that is used for SharePoint 2010 products

  • Membership in the WSS_Content_Application_Pools database role in the SharePoint_Config database

Enterprise Search

  • Membership in the System administrator role in Microsoft Dynamics AX

  • Membership in the Administrator group in Microsoft SharePoint Services

  • Membership in the dbcreator role on the instance of SQL Server that is used for Microsoft SharePoint Services

Help server

Membership in the System administrator role in Microsoft Dynamics AX

Management Reporter (server components)

  • Membership in the sysadmin role on the instance of SQL Server that you want to connect to.

  • To finish the initial configuration of Management Reporter, membership is required in the Administrator role in Management Reporter.

Microsoft SQL Server Reporting Services extensions

Membership in the System administrator role in Microsoft Dynamics AX

Microsoft SQL Server Analysis Services configuration

  • Membership in the System administrator role in Microsoft Dynamics AX

  • Membership in the SQL Server securityadmin server role

  • Membership in the SQL Server db_owner database role for the Microsoft Dynamics AX database

Client

None

Microsoft Office add-ins

None

Remote Desktop Services integration

None

Report Designer for Management Reporter (client component)

None

Debugger

None

Visual Studio Tools

None

Trace Parser

None

Web services on Internet Information Services (IIS)

Membership in the System administrator role in Microsoft Dynamics AX

.NET Business Connector

None

Synchronization proxy

  • Membership in the dbowner database role in the SQL Server database for Microsoft Project Server

  • Membership in the System administrator role in Microsoft Dynamics AX

Synchronization service

Membership in the System administrator role in Microsoft Dynamics AX

Management utilities

None

Retail Headquarters

None

Retail POS

None

Commerce Data Exchange: Synch Service (Retail Store Connect)

To install Synch Service, no additional permissions are required. To configure Synch Service, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.

Commerce Data Exchange: Real-time Service (Retail Transaction Service)

None

Commerce Data Exchange: Async Server

To install Async Server, no additional permissions are required. To configure Async Server, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.

Commerce Data Exchange: Async Client

To install Async Client, no additional permissions are required. To configure Async Client, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.

Retail Channel Configuration Utility (Retail Store Database Utility)

To install the utility, no additional permissions are required. To configure databases, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.

Retail SDK (Retail POS Plug-ins)

None

Retail Online Channel

None

Retail Server

None

Retail mass deployment toolkit

None

Modern POS

None

Retail channel database

None

Retail hardware station

None

RapidStart Connector

None

Warehouse Mobile Devices Portal

None

Data Import/Export Framework

  • Membership in the dbdatareader and dbdatawriter roles on the instance of SQL Server that you want to connect to

  • Membership in the System administrator role in Microsoft Dynamics AX

VSS writer

Membership in the Administrators group on the computer where Microsoft System Center 2012 Data Protection Manager (DPM) is installed

Connector for Microsoft Dynamics

  • Permission to query for entries in Active Directory

  • Membership in the SQL Server dbcreator server role

  • Membership in the SQL Server securityadmin server role

  • Membership in the sysadmin database role on the SQL Server instance that hosts the Microsoft Dynamics Integration (MSDI) database