There is 2 accounts that is required for search.. one for the search service and other for content access.
SharePoint Server search service account
The SharePoint Server 2010 Search service account is used as the service account for the SharePoint Server 2010 Search service. The SharePoint Server Search Service is an NT Service, which is used by all Search Service Applications. For any given server, there is only one instance of this service.
The SharePoint Server 2010 search service account requires the following permission configuration setting:
- The search service account must not be a built-in account in order to access the database. Examples of built-in accounts are Local Service and Network Service.
- The SharePoint Server 2010 search service account is granted access to the propagation location share (or shares) on all search query servers in a farm.
- The SharePoint Server 2010 search service account is a member of WSS_WPG.
- This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role associated with the farm configuration database.
- This account is assigned to the WSS_CONTENT_APPLICATION_POOLS role associated with the SharePoint_Admin content database.
Default Content Access Account
The default content access account is used within a specific service application to crawl content, unless a different authentication method is specified by a crawl rule for a URL or URL pattern.
This account requires the following permission configuration settings:
- The default content access account must be a domain user account and it must have read access to external or secure content sources that you want to crawl by using this account.
- For SharePoint Server sites that are not part of the server farm, this account must be explicitly granted full read permissions to the Web applications that host the sites.
- This account must not be a member of the farm administrators group.
- The search service will access all content using this account.
- The account will be added to the Full Read policy *, giving it read-only access to all content.
- For proper search functionality and information security, do not use an administrator account, and do not use accounts that can modify content.
- This should be a unique, dedicated only for Search account
|Full Read Policy|