Go Up
You are here: DeploymentConfigure Netwrix Auditor Service AccountsConfigure Data Collecting Account

Configure Data Collecting Account

This service account is specified on the monitoring plan creation and is used to collect audit data from the data source items. To ensure successful data collection, Netwrix recommends creating a special service account in advance. The account must comply with the following requirements depending on the data source.

Data source Rights and permissions

Active Directory

Azure AD


Exchange Online

Windows File Servers

EMC Isilon



Network Devices

No special configuration required.
Oracle Database


For settings required to collect state-in-time data from a SharePoint farm, see Object Types and Attributes Monitored on SharePoint.

SharePoint Online (including OneDrive for Business)

SQL Server


Windows Server (including DNS and DHCP)

Event Log (including IIS)—collected with Event Log Manager

Group Policy

Inactive Users in Active Directory—collected with Inactive User Tracker

Logon Activity

Password Expiration in Active Directory—collected with Password Expiration Notifier

User Activity

Go Up