skullicious Posted July 25, 2014 Report post Posted July 25, 2014 Hey, I'm hoping someone can point me in the right direction. I'm having an issue in getting my application pool identity cmWebSvc to have enough permissions to query the SCCM SQL database. If I use my CMAdmin account the web service returns results as expected. This is how I currently have it configured but it doesn't seem to be enough.. Could anyone shed some light? Thanks! Quote Share this post Link to post Share on other sites More sharing options...
0 GarthMJ Posted July 25, 2014 Report post Posted July 25, 2014 What does you web service do? What does the SQL query look like? Are you using RBA? 1 Quote Share this post Link to post Share on other sites More sharing options...
0 skullicious Posted July 25, 2014 Report post Posted July 25, 2014 Hi Garth, Sorry that was a bit vague! I'm using Maik Koster's Web Services version 7.3. The MDT.asmx and AD.asmx pages functions run fine with the permissions specified. No, I haven't configured any RBA in SCCM. Only SQL permissions directly on the database. A sample query would be: Select * from sms_tasksequencepackage using the GetTaskSequences function. The funny thing is I can log into the database via SQL management studio a run the query from there no problem ?! Quote Share this post Link to post Share on other sites More sharing options...
0 skullicious Posted July 25, 2014 Report post Posted July 25, 2014 Ah! I added the user through RBAC and they are now able to get results from the SCCM Web Services.. You're a legend, Garth! Do you know why this is the case and the explicit SCCM permissions are not enough as they would be in the MDT database? Quote Share this post Link to post Share on other sites More sharing options...
0 GarthMJ Posted July 25, 2014 Report post Posted July 25, 2014 Maik's web service using the SMS Provide to preform actions, therefore you would to grant the account access within CM12. 1 Quote Share this post Link to post Share on other sites More sharing options...
0 skullicious Posted July 25, 2014 Report post Posted July 25, 2014 Awesome. Thanks for clearing that up! Quote Share this post Link to post Share on other sites More sharing options...
Hey,
I'm hoping someone can point me in the right direction.
I'm having an issue in getting my application pool identity cmWebSvc to have enough permissions to query the SCCM SQL database.
If I use my CMAdmin account the web service returns results as expected.
This is how I currently have it configured but it doesn't seem to be enough..
Could anyone shed some light?
Thanks!
Share this post
Link to post
Share on other sites