Question

Files service account permissions

  • 21 February 2020
  • 3 replies
  • 1849 views

Does anyone know the granular service account permissions? I can’t give it domain admin credentials.


This topic has been closed for comments

3 replies

Hello @CoryZaner ,

For fileserver version 3.6 or higher, below are the required domain user permissions for the relevant AD organisation unit (OU) realm:

  • Create computer objects
  • Read/Write service principal names

Note: If the DNS domain name of the file server is different from the AD domain name, the following permission is also required:

  • Read/Write DNS host name

Reference: https://portal.nutanix.com/#/page/docs/details?targetId=Files-v3_6:Files-v3_6

Hi @Jubran  I need to know what permissions the service account needs on the domain not Nutanix. Thanks 

Userlevel 3
Badge +3

Hi Cory,

To grant a service account an admin permissions, go to Prism > Home (drop-down menu) > File server > Click on the name of the Server and then click “Manage roles”. 

You can edit the credential of each user and grant it “File Server Admin: Full Access”.