Document Required Windows Permissions per WMI Sensor (DCOM vs. WSMan) in the Sensor Manual Remarks
As a Systems Engineer setting up WMI-based sensors, I want each sensor’s manual page to list the specific Windows permissions and group memberships required (differentiated by DCOM and WSMan connection method where they differ) so that I can configure least-privilege monitoring credentials correctly on the first attempt instead of diagnosing permission failures through trial and error.
Background:
For sensors that retrieve data via WMI using WSMan, it appears that additional user permissions may be required depending on the type of monitoring performed.
For example, it took me some time to identify that the Event Log Readers group membership was required to use the WMI Event Log sensor.
To help users identify such requirements more easily, I would appreciate it if the necessary permissions could be listed in the “Remarks” section of each sensor’s manual.