Instructions:

Swimage uses the Server Access account (SwimageSync) to connect to SCCM to read and manage objects it creates.  The following class and instance permissions should be configured in SCCM for the Server Access account (SwimageSync).  Permissions should be configured using the ‘Manage ConfigMgr Users’ action in the ConfigMgr Console so that the account is added to the ‘SMS Admins’ local group on the SCCM server.

Class	Instance	Permissions
Advertisement	All Instances	Read, Modify, Delete, Create, Manage Folders
Collection	All Instances	Read, Modify, Delete, Advertise, Create, Read Resource
Site	All Instances	Read
Package	All Instances	Read, Modify, Delete, Distribute, Create, Manage Folders
Status Message	All Instances	Read
Configuration Items	All Instances	Read
Deployment	All Instances	Read
Deployment Package	All Instances	Read
Deployment Template	All Instances	Read

For SCCM Current Branch the Permissions and Roles have changed.  To configure access for Current Branch use the following table to setup the Role and Scope for the SwimageSync Account.

Additionally:

• The SwimageSync account must be manually added to the ‘Distributed COM Users’ group on the SCCM server so it can access DCOM remotely.
• If Swimage is on the same computer as an SCCM Management Point, the SwimageSync Account must be added to the local Administrators group.

NOTE: If you have integrated with SCCM you can sync your SCCM packages in Swimage.  Please see the Admin Guide for more information.

Return to Swimage Training