Low Privelege Access for Monitoring Various Workloads
I'm not sure this is really an "issue" but didn't find a category that seemed to fit.
Looking at this article
It talks about adding a runas account to the RTCUniversalUserAdmins group which has the ability to manage all lync users in the Forest. In some organizations it may not be feasible to add an account as an "admin" like this. Is there no way to perform your Lync workload monitoring in a low-priv environment?
Also, the article does not talk about distributing the runas account out to the servers in any fashion. I imagine this may also be an issue with SQL monitoring, I'm actually just now working through the alerts and ignoring ones that don't actually matter, and addressing the ones that do.
For the new ‘vertical’ workload assessment Intelligence Packs (see mention here http://feedback.azure.com/forums/267889-azure-operations-insights/suggestions/6519186-sql-server-intelligence-pack and here http://feedback.azure.com/forums/267889-azure-operations-insights/suggestions/6519201-configuration-assessment-alerts-and-recommendation ) we will have RunAs accounts.
We just shipped the first one of these http://blogs.technet.com/b/momteam/archive/2014/10/23/new-sql-server-assessment-intelligence-pack-in-advisor.aspx
The RunAs account is documented here http://technet.microsoft.com/en-us/library/dn818161.aspx
The minimum privileges will still depend on the workload itself, anyhow (i.e. what privilege level you need to actually read the information to be assessed). Each of these new assessments will also produce records in search (there is a saved search for that already!) that will tell you whether any pre-requisite or permission was an issue when running the assessment.