Summary: A list of permissions needed for the service account monitoring Windows data sources with Varonis SaaS.

 


Monitoring account (svcVaronis) permissions requires the following: 

  • Local Administrator (not recommended, as this grants more rights than needed)

or

A member of these built-in groups on the file server:

  • Backup Operator
  • Power User

 

To add the svcVaronis account to one of the groups above, take the following steps:

1. Sign into the server you’re giving the account permission to.

2. Search for “Edit local users and groups”

3.Find Groups and open it. From there, add the svcVaronis account and hit OK/Apply.

4. Once this is completed, sign into the AZ-CYBERDLP01 server

5. Launch the Varonis Management Console and select 'File Servers'

6. Next to 'Resources' at the top, select 'Add'


7. The resource wizard will populate; fill it out with the appropriate details. You’ll only have to fill out the Common tab.

  •      It should look something like this:


8. Before you can install, you have to verify your connection to the resource. To do this, look under Resource Type, and hit Connect and verify. If it works you should be good to go. If it doesn’t, it’ll display an error with reasoning as to why it failed.


9. From there, hit install and you're good to go. Give it time to run and check back later!