We have several M$ CRM instances running.
Each one has its own dedicated SQL Server instance.
The permissions are set up in accordance with the Microsoft recommendations for setting up MS CRM.
However, I can't find any documentation regarding minimal required permissions to run CRM.
Currently we have the following two permissions that I would like to remove:
- CRM app pool user has administrator on the SQL Server machine
- CRM app pool user has sysadmin on the SQL Server instance
My main concern is that this user is currently grouped in with other service account users when it comes to permissions (and the process for obtaining/changing the password). However it is for all intents and purposes an administrator account.
Does anyone have any prior experience with removing the CRM app pool users' permission after installation?