Run As Profiles

Applies To: Operations Manager 2007

The Service Manager Management Pack introduces a new Run As profile named the Service Manager Database Account profile. Before you import the management pack, you must add a Run As account to the Service Manager Database Account profile, and then add the Run As account to the Service Manager database server and to the server that hosts the staging and configuration database DWStagingAndConfig, as describe in the following sections. The Run As account that is associated with the Service Manager Database Account profile is then used to access the Service Manager database and the DWStagingAndConfig database.

Use the following procedure in the Operations Manager 2007 R2 console. For more information about the detailed steps of these procedures, see Configuring Security for Operations Manager 2007 R2 (https://go.microsoft.com/fwlink/?LinkId=192160) on Microsoft TechNet.

To add a Run As account to the Service Manager Database Account profile

  1. Open the Operations Manager 2007 R2 console.

  2. Create a new Run As account in the Create Run As Account Wizard. On the General Properties page, in the Run As Account type box, select Windows.

    The Run As account that you create must be configured to have logon permission to the Service Manager management server and to the Service Manager data warehouse management server that are being monitored by the Operations Manager agent. Also, it must have permissions to access the following registry keys, both on the Service Manager management server and on the Service Manager data warehouse management server:

    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\System Center

    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\ServerManagement Groups

  3. Locate the Service Manager Database Account profile, and start the Run As Profile Wizard. On the Run As Accounts page, add the new Run As account.

Use the following procedure on the Service Manager database server and on the server that hosts the staging and configuration DWStagingAndConfig database.

To update the Service Manager database servers by using the new Service Manager Database Account profile

  1. On the server that is hosting the Service Manager database and on the server that is hosting the staging and the configuration database, open Microsoft SQL Server Management Studio.

  2. Log on to the instance of SQL Server that contains the Service Manager database.

  3. In the Object Explorer pane, expand Security, right-click Logins, and then click New Login.

  4. In the Login – New dialog box, type a logon name in the Login name box, or use Search to locate an account.

  5. Click OK.

  6. In the Object Explorer pane, expand Databases, <Service Manager database name>, and Security. Right-click Users, and then select New User.

  7. In the Database User – New dialog box, in the User name box, type a user name.

  8. Click the Login name ellipsis (…) button to locate the logon that you just created, and then click OK.

  9. In the Object Explorer pane, browse to Databases, <Service Manager database name>, Security, Roles, and then expand Database Roles.

  10. Right-click db_datareader, and then click Properties.

  11. In the Properties dialog box, click Add.

  12. In the Select Database User or Role box, click Browse, and in the Browse for Objects dialog box, select the user that you previously created.

  13. Click OK to close all dialog boxes.