Stored Data Integration Guide › Deploying the FSA › FSA Requirements › FSA User Accounts

FSA User Accounts

The FSA requires the following user accounts:

FSA job setup user

Log on to the Administration console using this Windows user account. The Administration console then uses this account to connect to the FSA server when you create or manage scanning jobs.

FSA service user

The FSA service runs as this user account. The user must be a local administrator on the FSA host machine.

FSA Run As user

A scanning job runs as this user account. There are two types of Run As user: a limited access user and a full access user. These can be used to test different aspects of data security on your network.

List and Site Permissions

If you intend to use the FSA to scan items on Microsoft SharePoint sites, the user that the Remote FSA Connector runs as on the SharePoint host machine must have sufficient List and Site permissions to the Microsoft SharePoint site being scanned. For example, a capture-only policy requires at least the 'View Items' and 'View Application Pages' List permissions and the 'Browse Directories' Site permission.

PE domain user

As part of the policy engine hub installation, the wizard prompts you for the credentials of the PE domain user. This user account must be a member of the local Administrators group on the FSA host server. Confirm this is so before installing the hub.