Redgate SQL Monitor base monitor permissions

Question

I'm setting up Redgate's SQL Monitor. The Base Monitor is the bit that actually collects data from monitored SQL Server instances and their hosts. This page describes the permissions required by accounts running the various components, and asserts that the account "should be an administrator on the machine".

We don't want this account to be an admin, for a number of reasons. Is there a list of the actual, fine-grained permissions required to run this?

First stab includes:

• Maybe membership of Performance Monitor Users
• Maybe membership of Performance Log Users
• Maybe membership of Event Log Readers
• WMI - Remote Enable on root\\CIMV2 ( reference )
• Needs to be able to read at least parts of the registry ( HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\TimeZoneInformation )

At the moment I'm just chasing down each one and find a permissions that allows it, but it's pretty tedious.

Answer 1

Red Gate doesn't have a list of specific permissions that will work. I'm pretty sure that the help page says the account has to be an administrator because you need that to access the performance counters remotely.

Answer 2

I know your original post was about 2 years ago, but wanted to say that Red Gate has updated permissions to be a bit more granular for the Base Monitor Service. Please see the following for more details: SQL Monitor Permissions

Also, I find the that the following link is pretty helpful in terms of troubleshooting permissions or connections issues for SQL Monitor:

Test Data Collection

It may be a couple of years late, but hope this helps! :)