Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.19
  3. BlackBerry UEM Installation and Upgrade
  4. Preinstallation and preupgrade tasks
  5. Configure permissions for the service account

Configure permissions for the service account

A service account is a
Windows
 account that runs the services for
BlackBerry UEM
. The service account must be a member of the local Administrators group with default policy settings on the computer that you install
BlackBerry UEM
 on, and must have the Log on as a service permission. The
Windows
 service account must also have permission to access the
Microsoft SQL Server
 unless you are using direct
SQL Server
authentication.
If your organization's environment includes another EMM solution from
BlackBerry
, you can use the same service account to install
BlackBerry UEM
. Otherwise, create a service account in your company directory or a local
Windows
 account on the computer that you want to install
BlackBerry UEM
 on.
If you use
Microsoft SQL Server
 authentication to connect to the
BlackBerry UEM
 database, the
BlackBerry UEM
 services run under the Local System account.
  1. On the taskbar, click
    Start > Administrative Tools > Computer Management
    .
  2. In the left pane, expand
    Local Users and Groups
    .
  3. Navigate to the
    Groups
     folder.
  4. In the right pane, double-click
    Administrators
    .
  5. Click
    Add
    .
  6. In the
    Enter the object names to select
     field, type the name of the service account (for example, BESAdmin).
  7. Click
    OK
    .
  8. Click
    Apply
    .
  9. Click
    OK
    .
  10. On the taskbar, click
    Start > Administrative Tools > Local Security Policy
    .
  11. In the left pane, expand
    Local policies
    .
  12. Click
    User Rights Assignment
    .
  13. Configure
    Log on as a service
     permission for the service account.