You require SQL Server to be installed but don’t have access to do it yourself, and require an external organisation to do this for you. They have asked you for the permissions required for service accounts. The following link contains the standard the best practices link for setting up SQL Server 2012 services including firewalls and service accounts.
I find it less problematic to use an installation account with the elevated permissions but lock down the specific services as per best practice below.
Within this link contains two main links more specific conversations about service accounts and firewalls :
1. service accounts http://msdn.microsoft.com/en-us/library/ms143504.aspx
2. firewall settings http://msdn.microsoft.com/en-us/library/cc646023.aspx
The full list of services installed by sql server is outlined below however in service accounts above, scroll down to windows priviledges and rights section for specific security settings for each of these services:
- SQL Server Database Services – The service for the SQL Server relational Database Engine. The executable file is <MSSQLPATH>\MSSQL\Binn\sqlservr.exe.
- SQL Server Agent – Executes jobs, monitors SQL Server, fires alerts, and enables automation of some administrative tasks. The SQL Server Agent service is present but disabled on instances of SQL Server Express. The executable file is <MSSQLPATH>\MSSQL\Binn\sqlagent.exe.
- Analysis Services – Provides online analytical processing (OLAP) and data mining functionality for business intelligence applications. The executable file is <MSSQLPATH>\OLAP\Bin\msmdsrv.exe.
- Reporting Services – Manages, executes, creates, schedules, and delivers reports. The executable file is <MSSQLPATH>\Reporting Services\ReportServer\Bin\ReportingServicesService.exe.
- Integration Services – Provides management support for Integration Services package storage and execution. The executable path is <MSSQLPATH>\110\DTS\Binn\MsDtsSrvr.exe
- SQL Server Browser – The name resolution service that provides SQL Server connection information for client computers. The executable path is c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
- Full-text search – Quickly creates full-text indexes on content and properties of structured and semistructured data to provide document filtering and word-breaking for SQL Server.
- SQL Writer – Allows backup and restore applications to operate in the Volume Shadow Copy Service (VSS) framework.
- SQL Server Distributed Replay Controller – Provides trace replay orchestration across multiple Distributed Replay client computers.
- SQL Server Distributed Replay Client – One or more Distributed Replay client computers that work together with a Distributed Replay controller to simulate concurrent workloads against an instance of the SQL Server Database Engine.