Preparing Migration 8.14 - System Requirements and Access Rights

Requires Full Control rights in the project.

At least the db_datareader role on the configuration database.

Important: Only SQL Server authentication is supported for this operation by the Statistics Portal Server. AD-integrated authentication (Windows authentication) is not supported.

We recommend that you to create a new user account for the migration activities in each source and target domain instead of using an existing one. Add these accounts to the domain’s local Administrators group in the corresponding domains. For details, see Appendix. How to Set the Required Permissions for Active Directory Migrationand dedicated Exchange environment preparation documents..

Note: If you have established two-way trusts between each source and target domain or forest trust, you can grant this single account administrative access to each source and target domain.

Important: This powerful account must be maintained closely and should be deleted after the project is complete. It is recommended that this account be owned by one individual and one backup individual (or as few individuals as possible).

• Member of the local Administrators group on the computer running the Resource Updating Manager
• Full Admin access rights on the ADAM/AD LDS database access rights on the ADAM/AD LDS database

How to specify the SharePoint administration group:

1. On the server that is running SharePoint Products, click Start, point to Administrative Tools, and then click SharePoint Central Administration.
2. Under Security Configuration, click Set SharePoint administration group.
3. In the Group account name box, type the domain group you want to allow to administer.
4. Click OK.

For more information about Central Administrator group for SharePoint, see the following Microsoft KB article: Managing the SharePoint Administration Group.

How to add user account to the Farm Administrators group:

1. On the server that is running SharePoint Products, click Start, point to Administrative Tools, and then click SharePoint Central Administration.
2. Under Security click Manage the farm administrators group.
3. Expand the New menu, and then click Add Users.
4. On the Add Users page, in the Add Users section, specify user accounts which should be added to the Farm Administrators group.
5. Click OK.

How to grant user account the Full Control permission on User Profile Service Application:

1. On the server that is running SharePoint Products, click Start, point to Administrative Tools, and then click SharePoint Central Administration.
2. Click Application Management.
3. Then click Manage service applications.
4. Select User Profile Service Application.
5. Click Permission and grant the Full Control permission to desired user account.
6. After that, click Administrators and grant the Full Control permission to the user account.

To grant an account this permission, complete the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties on the shortcut menu.
2. On the Security tab, click Add and select the account to which you wish to assign permissions.
3. Select the account name, and then enable Allow option for the Read permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog, select the account you specified in step 2 and click Edit.
5. In the Permissions Entry dialog, select This object and all child (descendant) objects from the Apply onto drop-down list, and click OK.
6. Close the dialog boxes by clicking OK.