What permissions are required for the accounts involved in an eDiscovery collection from Enterprise Vault?
book
Article ID: 100029150
calendar_today
Updated On:
Resolution
In order to perform a successful EV Collection, there are three accounts involved and each need specific permissions to access the EV archives and write to the collections destination as follows:
- EsaEVCrawlerService - This is a Windows service and requires Read permission to the EV archives. This account is used to discover the EV Archives. Note: In order to apply the required Read permissions to the EV archives an EV Admin should be consulted.
- EV Collection Source Account - This is configured when setting up your EV Source for EV Collections and requires Read permissions to the EV archives. This account can be the same account used to start the EsaEVCrawlerServer. The Vault Service Account can be used, but not required.
- Destination Account - This is configured when setting up the destination locations and requires Read/Write permissions to the Collection destination server. Admin of the destination media should be consulted.
As mentioned in the Veritas eDiscovery Identification & Collection Guide, "If you plan to collect from a Veritas EV source, be sure to use an Active Directory username and password that can navigate EV topology and searches using the EV Admin Console. Use this account for both the EsaEvCrawlerService logon and your EV collection source account. Make sure that the account belongs to the “Local Administrators” group on the Clearwell appliance." Please note: The "Allow Logon Locally" user rights assignment must be granted to the EV collection source account. If this right is denied, EV collections will fail.
Issue/Introduction
When setting up eDiscovery for collections from Enterprise Vault (EV), what are the specific permissions required for the accounts involved.
Solution
Was this article helpful?
thumb_up
Yes
thumb_down
No