Admin Accounts

SP_Admin

  • Installs and configures the SharePoint farm
  • Local administrator on every SharePoint server
  • Member of SecurityAdmin and DB_Creator server roles on SQL Server instance

SQL_Admin

  • Installs and configures SQL Server
  • Local administrator on database server

 

SQL Server Accounts

The Database Engine service and the SQL Agent service are both Windows services

Use a regular domain user for each – the installation process will grant the required permissions

SQL_Engine

  • Service account for SQL Server Database Engine service
  • Domain user

SQL_Agent

  • Service account for SQL Server Agent service
  • Domain user

 

SharePoint Service Accounts

these should all be regular domain users

SP_Farm

  • Application pool identity for Central Administration website
  • Identity used by SharePoint for farm management and configuration tasks
  • Identity used by SharePoint timer service

SP_AppPool

  • Application pool identity for SharePoint web applications

SP_Services

  • Application pool identity for SharePoint service applications

 

Best practices – consider putting service accounts for your SharePoint farm in an OU, and provide a helpful description for each account!