Here are the docs. https://learn.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/configure-role-based-administration
Configuring SCCM
Hello,
When i'm config sccm, i wanna set another user instead domain admin user
Do you have any solution?
Thanks.
3 answers
Sort by: Most helpful
-
-
Sherry Kissinger 5,171 Reputation points
2024-11-19T14:56:01+00:00 I'm not sure I understand the question, what I think you are asking is that you would like to have a local user, or a non-domain user, have rights to be an account with rights to launch the CM Console?
I'm fairly certain that is not possible, since CM requires that a domain be available, and valid, all rights to connect to the console require a domain account.
Perhaps what you mean is that you would like a domain group to be granted rights, and then to that domain group you may add individual accounts.
That is a perfectly valid and often done configuration of security within the CM Console. Create a group in your domain, and add that group to security within the console. You will need to do that initial configuration as the existing administrative user; but once done, any accounts within that domain group will be able to launch and connect.
Review this, for additional information: https://learn.microsoft.com/en-us/mem/configmgr/core/understand/fundamentals-of-role-based-administration
-
AllenLiu-MSFT 45,686 Reputation points Microsoft Vendor
2024-11-20T02:24:45.8+00:00 Hi, @ali faraji
Thank you for posting in Microsoft Q&A forum.
To configure SCCM with a user other than a domain admin, you can create an administrative user in Configuration Manager. Here are the steps to do so:
- In the Configuration Manager console, go to the Administration workspace, expand Security, and select the Administrative Users node.
- On the Home tab of the ribbon, in the Create group, select Add User or Group.
- Browse and select the user account or group you want to use as the new administrative user.
- Assign one or more security roles to the user by selecting Add under Associated security roles.
- Define the securable object behavior for the new user by choosing the appropriate options for security scopes and collections.
- Finally, select OK to create the administrative user.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".