Explicit Permissions for DocAve 6 Platform Backup and Restore

Search and filter

KB Article ID: 10220

Product: Backup and Restore
Product Version: 6.0.0.0
SharePoint Version: 2010,2010 SP1

Details:

To view the minimum permissions required for each DocAve 6 Platform Backup and Restore Agent installed on the servers in the farm, refer to the information below:
 
Any Agent configured on a SharePoint Central Administration Server:

  • Local System Permissions: These permissions are automatically configured by DocAve during installation. Refer to Local System Permissions below for a list of the permissions automatically configured upon installation. If there are no strict limitations within your organization on the permissions that can be applied, you can simply add the DocAve Agent Account to the local Administrators group to apply all of the required permissions.
  • SharePoint Permissions: These permissions must be manually configured prior to using DocAve 6 Platform Backup and Restore; they are not automatically configured.
  • Member of the Farm Administrators group
  • Full control to all zones of all Web applications via User Policy for Web Applications
  • User Profile Service Application permissions:
  • User Personal Features
  • Create Personal Site
  • Use Social Features
  • Managed Metadata Service: Term Store Administrator
  • Business Data Connectivity Service: Full Control
  • Search Service: Full Control
  • SQL Permissions: These permissions must be manually configured prior to using DocAve 6 Platform Backup and Restore; they are not automatically configured.   
  • Database Role of db_owner for all the databases related with SharePoint, including content databases, SharePoint configuration database, and Central Admin database
  • Database Role of public, dbcreator and Security Admin to SQL Server.
  • Database permission of View server state to SQL Server.
  • One of the following database permissions to SQL Server:
  • Create any database
  • Alter any database
  • View any definition
  • Any Agent configured on any SharePoint Server other than SQL Server:

  • Local System Permissions
  • Member of the following local groups:
  • Administrators
  • FASTSearchAdministrators (this permission is only required for the Agent Account configured on the Fast Search server)
  • Any Agent configured on the SQL Server:

  • Local System Permissions
  • Member of the Administrators local group
  • SQL Server
  • Database Role of sysadmin to SQL Server (this is only required for Incremental backups)
  • *Note: In order to back up the SharePoint Help Search, the user who enables it must be added to the Administrators group on the corresponding machine.
     
     
    Local System Permissions:
    The following Local System Permissions are automatically configured during DocAve 6 installation:

  • User is a member of the following local groups:
  • IIS WPG (for IIS 6.0) or IIS IUSRS (for IIS 7.0)
  • Performance Monitor Users
  • DocAve Users (the group is created by DocAve automatically; it has the following permissions):
  • Full control to the Registry of HKEY LOCAL MACHINE\SOFTWARE\AvePoint\DocAve6
  • Full control to the Registry of HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog6
  • Full Control to the Communication Certificate
  • Permission of Log on as a batch job (it can be found within Control Panel > Administrative Tools > Local Security Policy > Security Settings > Local Policies > User Rights Assignment)
  • Full Control Permission for DocAve Agent installation directory