What permissions do the Runas account need to be able to deploy VMs on behalf of a Tenant Admin or Self Service User? RRS feed

  • General discussion

  • I understand the process of creating a Tenant Administrator or Self Service User. These roles execute tasks using a Runas account. The Runas account contains the "Active Directory" or local user account. What permissions do the "Active Directory account" residing inside the Runas account need to be able to create virtual machines on behalf of the self service user? Typical scenario: 

    Create a user account in an OU in AD. We are planning to use this account inside a Runas in VMM to deploy VMs. On what objects should I add the user account and what permissions does this account need to successfully deply VMs using templates?

    Thursday, December 28, 2017 3:50 PM

All replies

  • Hi,

    Did you get this resolved?

    The Active Directory account don't need any specific permissions to be able to do things in SCVMM.

    It is in SCVMM when you configure for example the Tenant Administrator where you configure what permissions it has and what it can do in SCVMM.

    Kind regards,

    Blog: https://thesystemcenterblog.com  LinkedIn:   

    Friday, May 18, 2018 5:53 PM