What are the requirements for the installing the MNSP Import Service? (4256586)

What are the requirements for the installing the MNSP Import Service?

What are the permission/security requirements for installing the Migrator for Notes to SharePoint Import Service?

MNSP uses an import web service that uses the SharePoint object model to perform operations on a SharePoint site. MNSP thus uses the same application pool identity as is used by the SharePoint site.

The IIS Application Pool Identity User should have DB_OWNER access to the SharePoint Configuration Database (Configuration DB created during the installation of SharePoint farm) and the SharePoint Content Database (SharePoint Site Collection Database of the site you are trying to access).

It is recommended that an Administrator account is used for the application pool identity for the Import Service. If SQL Server is running on the same machine as SharePoint, this can be a local administrator account; if SQL Server is running on a different machine, you will need to use a domain Administrator account. This account needs to be a site collection administrator for all of the site collections to which you will be migrating (and therefore, of course, must have write permissions on the SQL content databases used by SharePoint).

Please note that you must also set this name in the Application Pool Identity field in the Notes Migrator for SharePoint Services Configuration page for each of the web applications on which the Import Service is enabled; this name must be a fully-qualified name (i.e., "DomainName\UserName" or "MachineName\UserName"). It should not be necessary to enable anonymous access on any of the SharePoint sites to use the Import Service.

Reference the attached document on how to properly install and configure the MNSP Import Service and Link Tracking.

Installing the Import and Link Tracking Services on a SharePoint Server

The Import Service writes data to the SharePoint sites impersonating the user who has authenticated with the service; in order to be able to open these sites, however, the Import Service code executes using the application pool identity for the Import Service. This is why the application pool identity must have sufficient permissions in SharePoint (and SQL Server) to be able to open sites.