Verify that you have the required permissions for installation

Important

This content is archived and is not being updated. For the latest documentation, see Microsoft Dynamics 365 product documentation. For the latest release plans, see Dynamics 365 and Microsoft Power Platform release plans.

Applies To: Microsoft Dynamics AX 2012 R3, Microsoft Dynamics AX 2012 R2, Microsoft Dynamics AX 2012 Feature Pack, Microsoft Dynamics AX 2012

Before you begin the installation of Microsoft Dynamics AX, work with a system administrator to make sure that the account that you log on with at each server has appropriate permissions. The permissions in the following table are recommended based on the principle of least privilege.

In all cases, you must be a member of the Administrators group on the local computer where you are installing a component. The following table lists the permissions that are required in addition to administrator access on the local computer.

Component	Additional permissions that are required to install the component
Databases	Membership in the dbcreator server role in Microsoft SQL Server Membership in the securityadmin server role in SQL Server Membership in the db_accessadmin database role in SQL Server for the Microsoft Dynamics AX database If you install the databases remotely from a computer other than the database server, you must log on to the remote computer by using an account that is an administrator on the SQL Server computer. Setup requires access to SQL Server services.
Application Object Server (AOS)	Membership in the sysadmin role on the instance of SQL Server that you want to connect to
Enterprise Portal for Microsoft Dynamics AX	Membership in the System administrator role in Microsoft Dynamics AX Membership in the Administrators group in Windows on the Web server Membership in the Farm Administrators group in Microsoft SharePoint 2010 products Membership in the dbcreator role on the instance of SQL Server that is used for SharePoint 2010 products Membership in the WSS_Content_Application_Pools database role in the SharePoint_Config database
Enterprise Search	Membership in the System administrator role in Microsoft Dynamics AX Membership in the Administrator group in Microsoft SharePoint Services Membership in the dbcreator role on the instance of SQL Server that is used for Microsoft SharePoint Services
Help server	Membership in the System administrator role in Microsoft Dynamics AX
Management Reporter (server components)	Membership in the sysadmin role on the instance of SQL Server that you want to connect to. To finish the initial configuration of Management Reporter, membership is required in the Administrator role in Management Reporter.
Microsoft SQL Server Reporting Services extensions	Membership in the System administrator role in Microsoft Dynamics AX
Microsoft SQL Server Analysis Services configuration	Membership in the System administrator role in Microsoft Dynamics AX Membership in the SQL Server securityadmin server role Membership in the SQL Server db_owner database role for the Microsoft Dynamics AX database
Client	None
Microsoft Office add-ins	None
Remote Desktop Services integration	None
Report Designer for Management Reporter (client component)	None
Debugger	None
Visual Studio Tools	None
Trace Parser	None
Web services on Internet Information Services (IIS)	Membership in the System administrator role in Microsoft Dynamics AX
.NET Business Connector	None
Synchronization proxy	Membership in the dbowner database role in the SQL Server database for Microsoft Project Server Membership in the System administrator role in Microsoft Dynamics AX
Synchronization service	Membership in the System administrator role in Microsoft Dynamics AX
Management utilities	None
Retail Headquarters	None
Retail POS	None
Commerce Data Exchange: Synch Service (Retail Store Connect)	To install Synch Service, no additional permissions are required. To configure Synch Service, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.
Commerce Data Exchange: Real-time Service (Retail Transaction Service)	None
Commerce Data Exchange: Async Server	To install Async Server, no additional permissions are required. To configure Async Server, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.
Commerce Data Exchange: Async Client	To install Async Client, no additional permissions are required. To configure Async Client, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.
Retail Channel Configuration Utility (Retail Store Database Utility)	To install the utility, no additional permissions are required. To configure databases, membership is required in the sysadmin role on the instance of SQL Server that you want to connect to.
Retail SDK (Retail POS Plug-ins)	None
Retail Online Channel	None
Retail Server	None
Retail mass deployment toolkit	None
Modern POS	None
Retail channel database	None
Retail hardware station	None
RapidStart Connector	None
Warehouse Mobile Devices Portal	None
Data Import/Export Framework	Membership in the dbdatareader and dbdatawriter roles on the instance of SQL Server that you want to connect to Membership in the System administrator role in Microsoft Dynamics AX
VSS writer	Membership in the Administrators group on the computer where Microsoft System Center 2012 Data Protection Manager (DPM) is installed
Connector for Microsoft Dynamics	Permission to query for entries in Active Directory Membership in the SQL Server dbcreator server role Membership in the SQL Server securityadmin server role Membership in the sysadmin database role on the SQL Server instance that hosts the Microsoft Dynamics Integration (MSDI) database