Microsoft SharePoint Server
TMA-SHAREPOINT-2.4
Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.
HighLevel 1Manual reviewsharepoint
Description
The SharePoint setup account must be configured with the minimum privileges on the SQL server. Manual review.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
In SQL Server Management Studio on the farm's SQL instance open Security > Logins > <SharePoint setup account> > Server Roles. Verify only dbcreator and securityadmin are checked (plus public). sysadmin or other roles are non-compliant.
How it is fixed
Fix method: Guidance or infrastructure patch
In SSMS > Security > Logins > setup account > Server Roles, check only dbcreator and securityadmin (ALTER SERVER ROLE <role> DROP MEMBER [DOMAIN\setup] for others).
Properties
- Operating systems
- Any
- Tags
- sharepointservice-accountssql
- Reference
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.4 Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.