Granting other users access to the Enterprise Connector configuration
Use this topic to grant other users access to the Enterprise Connector configuration and to review operational guidance for managing Enterprise Connector access on Windows.
Granting access to other users
Access to the Enterprise Connector installation and its configuration is restricted by design. This design follows the principle of least privilege and separation of duties.
On Windows, Enterprise Connector uses a local Windows group to control access to the Enterprise Connector installation folder and configuration. A Windows server administrator does not automatically have access to Enterprise Connector or its configuration.
By default, only the user account that installed Enterprise Connector has access to the Enterprise Connector installation folder. Other users, including server administrators, do not automatically have access. To grant access, add those users to the Enterprise Connector local Windows group.
The default group name is IONEnterpriseConnector_full. If a different name was specified during installation, use that group name.
- Press Win + R, type lusrmgr.msc, and press Enter.
- Select .
- Locate the group that corresponds to the Enterprise Connector installation folder. The default group name is IONEnterpriseConnector_full.
- Double-click the group to open its properties.
- Select and add the Windows users or groups that require access.
- Select to save the changes.
Reviewing operational guidance
Add only users or Active Directory groups that require access to manage or troubleshoot Enterprise Connector.
Avoid granting broad access, such as adding administrative groups, unless this access is required by your organization's security policy.
Review group membership periodically to confirm that access remains aligned with security and operational requirements.