What is the best practise when it comes to using service accounts that run Qlik Sense services?

[jblomqvist]

Hello all,

What is the best practise when it comes to using service accounts that run Qlik Sense services? Especially in an enterprise environment?

Should you simply use your own log in account? Or create a Qlik specific account?

Any suggestions please with an explantion on why it's a good practise would be good so I can understand.

[Daniele_Purrone]

You should definitely use a dedicated account. Using a user account would result in access problems.

[jblomqvist]

Hi Daniele,

Thank you for this. What type of account should this be? Should it be a local account? Should it have any special privileges or be set-up as a administrator level access?

[Daniele_Purrone]

A domain account is recommended, in particular if you think that you might need to have the shared folder on another server. If you choose to use a local account, and you plan to sync AD users, you will, however, need to define a domain account in the User Directory Connector settings. So the easier solution is still to use a domain account for the services.

You will need an administrator account to install the software, and that's the recommended option.
But you can still use a non-dedicated account for running the services if you prefer. 

"We recommend that you use a dedicated Windows user account to run the Qlik Sense services. If your dedicated Windows Qlik Sense services user is an administrator, you can login as that user to install Qlik Sense. If your dedicated Windows Qlik Sense services user is not a local administrator, you must use an administrator account to install Qlik Sense."
https://help.qlik.com/en-US/sense/November2018/Subsystems/PlanningQlikSenseDeployments/Content/Sense...