Product: Integration Service
Article Link: http://help.truecommerce.com/en/articles/8282998-integration-service-why-does-truecommerce-require-local-admin
When it comes to configuring your Environment with any of the TrueCommerce provided applications, integrations, or services you will mostly be asked to grant TrueCommerce access to your Local Admin account over the Domain Admin account for the system where the software is being installed.
This policy is due to the complex nature that various Permission Sets, Group Policies, or other Security Protocols applied against the Domain Account that can result in unforeseen conflicts with installation of TrueCommerce software.
Security Concerns
While TrueCommerce understands the need to keep your system secure, TrueCommerce is not responsible for the security of your system and as such will need the fullest level of permissions in order to properly ensure TrueCommerce software is working as intended without interference.
Known Issues with Domain Admin
While TrueCommerce strives to continually improve its services we have identified that lack of proper permissions within the Domain Admin has resulted in failures of proper installation for various TrueCommerce applications, primarily the Integration Service.
Known Issues
For further information on the currently known issues please see the below article
This consistent issue has always been resolved with a proper re-installation under local admin utilizing the described process and requirements listed below. As such it is TrueCommerce's stance that local admin will be required to allow TrueCommerce to troubleshoot any failed installations and it is highly recommended to allow the installation with local admin from the beginning.
Limited Environmental Support
TrueCommerce does not provide expertise troubleshooting in environmental issues or setups - failure to provide local admin will result in limited support from TrueCommerce as the known fix is to utilize the local admin privileges
Local Admin vs Domain Admin
In short - a Domain Admin is controlled by Domain Policies, and the Domain Controller which both can negatively effect the installation process over TrueCommerce software due to restrictions that will cause unpredictable behaviors and failures that TrueCommerce is unable to provide assistance in troubleshooting.
As such, it is TrueCommerce's policy to require the Local Admin account to remove the interference that Domain Policies can cause as the starting point to installing the TrueCommerce software.
While effective permissions may appear to be the same at a surface level between your Local Admin and your Domain Admin it is outside the scope of TrueCommerce to diagnose or troubleshoot your security or the environment which the software is installed on.
Local Admin Confirmation
TrueCommerce utilizes the Command Prompt and the net localgroup administrators to confirm that the proper elevation is provided for TrueCommerce to perform the operations necessary to support your integration with the TrueCommerce platform.
Open: Command Prompt
Run: whoami
Run: net localgroup administrators
Compare: The current user to the listed admins
If the user provided by the whoami command does not match exactly the username listed under the net localgroup administrators it will be a valid Local Admin account and TrueCommerce will not be able to proceed with the installation until one of the users located within the localgroup administrators list is provided for the TrueCommerce team to work.
TrueCommerce does not retain an expertise on Networking, Network Security, or Permission Sets and as such all information is provided based on the services TrueCommerce is able to provide in order to support an environment.
If you wish for TrueCommerce to assist in configuring, troubleshooting, or modifying your environment in such a way that pertains to the applications or services provided you will need to provide Local Admin access. Otherwise TrueCommerce will provide you with documents detailing out the process, and troubleshooting will be outside the scope of TrueCommerce to assist with unless provided Local Admin access detailed above.
Support without Local Admin
If you are unable to provide TrueCommerce with access to a Local Admin account to proceed as required to modify the environment for the needs of the TrueCommerce integration, then TrueCommerce will limit its support for your system by providing documentation detailing out the details.
If you have any questions regarding the process, TrueCommerce will provide assistance in ensuring the proper knowledge has been provided in the form of questions answered or documentation.
Any failures in the operation of the software will not be supportable by TrueCommerce unless Local Admin access is provided at time of connection.
Security Concerns
While TrueCommerce fully understands your need for elevated security, due to high-increase of system restrictions being applied by security policies that TrueCommerce does not maintain, TrueCommerce will be unable to work on your system until proper elevated permissions are provided that the TrueCommerce software was designed to be installed with.
TrueCommerce is committed to getting your system integrated with the TrueCommerce platform but does not provide assistant in network or security configurations. As such will provide installation assistance only with the proper elevated user as detailed out.
rev 2/8/2024