How are permissions applied between Web Applications and from Service Applications?

I'm quite confused about how permissions are applied to Content Databases in relation to service accounts. So, as an example, I have two web applications - Intranet whose service account is DOMAIN\sps_webapp_default - and My Sites whose service account is DOMAIN\sps_webapp_social.  The "sps_webapp_social" account has full control (through User Policy) to the Intranet web app.

When I go to My Sites> Sites> Suggested Links and click on any suggestions I get the below error and the site is not "followed".  This Content Database sits under the Intranet web app which the sps_webapp_social has full control to.

I'm also getting similar permission issues when the account that runs various service applications tries to connect to the DB (such as workflow service).  This is happening to new or migrated sites.  I know permissions can be applied directly in SQL but this can't be the way to do it? 

Is there a simple reason why these permissions aren't propagating through?

March 23rd, 2015 6:44pm

permissions to the database ONLY exist for the service applications (app pool, service app, etc)... user accounts are NOT used to access the SharePoint databases.
Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2015 7:35pm

Hi Scott,

So, as per my example above, I need to get our DB's to add permissions to each site collection DB for the DOMAIN\sps_webapp_social (IIS account for the My Sites Application pool)?  I'm sure in previous environments I've not had to do this?

If that is the case - how do I know what SQL permission to apply for this account?

March 23rd, 2015 8:08pm

I resolved my issue. I deleted the Work Management Service Application and created it again - this time, I made sure the IIS Pool (I created its own application pool) service account running this was the same as the My Site service account.  So, running under DOMAIN\sps_webapp_social.  This seemed to clear up all of my permissions issues being thrown up in Event Viewer too.

My Sites really is a complicated beast...  I'm getting there.  Hopefully this helps somebody else!


Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2015 9:25pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics