SharePoint Solution
The core components for Netwrix Access Analyzer (formerly Enterprise Auditor) are the Access Analyzer Console server, SQL Server, and Access Information Center. See the Requirements topic for the core requirements.
You can configure the SharePoint solution to run without an agent or to use the Access Analyzer SharePoint Agent. See the SharePoint Agent Installation topic for additional information.
You must also integrate with the Netwrix Activity Monitor to scan event activity data. See the Netwrix Activity Monitor Documentation for installation requirements and information on collecting activity data.
For Activity Auditing (SPAC) scans, retain the audit logs that SharePoint generates for more days than the interval between Access Analyzer scans.
When configuring the Netwrix Activity Monitor, select all events to be monitored in both the Documents and Items section and the List, Libraries, and Site section.
See the following topics for the SharePoint Agent and the target environment requirements:
You can use the SP_RegisterAzureAppAuth instant job to make the configuration for SharePoint Online easier. This job registers the necessary Microsoft Entra ID application and provisions it with the required permissions. See the SP_RegisterAzureAppAuth Job topic for additional information.
SharePoint Solution Requirements on the Access Analyzer Console
RAM, CPU, and Disk Space
These are dependent upon the size of the target environment:
| Environment | Extra-Large | Large | Medium | Small |
|---|---|---|---|---|
| Definition | ~5,000 Site Collections or 5+ TB of managed data | ~2,500 Site Collections or 1-5 TB of managed data | ~1,000 Site Collections or 500 GB of managed data | ~100 Site Collections or 100 GB of managed data |
| RAM | 24 GB | 16 GB | 12 GB | 4 GB |
| Cores | 8 CPU | 8 CPU | 4 CPU | 2 CPU |
| Disk Space | 460 GB | 280 GB | 160 GB | 80 GB |
If you run Sensitive Data Discovery (SDD) scans, increase the minimum amount of RAM. Each thread requires a minimum of 2 additional GB of RAM per host. For example, if the job is configured to scan 8 hosts at a time, then an extra 16 GB of RAM are required (8x2=16).
Sensitive Data Discovery Auditing Requirement
The appropriate JDK (Java) version for Sensitive Data Discovery is installed on the server. The JDK deployed is prepackaged and doesn't require any configuration; it has been preconfigured to work with Access Analyzer and should never be customized through Java. It will not conflict with other JDKs or Java Runtimes in the same environment.
SharePoint Solution Requirements on the SQL Server
RAM, CPU, and Disk Space
These are dependent upon the size of the target environment.
| Environment | Extra-Large | Large | Medium | Small |
|---|---|---|---|---|
| Definition | ~5,000 Site Collections or 5+ TB of managed data | ~2,500 Site Collections or 1-5 TB of managed data | ~1,000 Site Collections or 500 GB of managed data | ~100 Site Collections or 100 GB of managed data |
| RAM | 64 GB | 32 GB | 16 GB | 8 GB |
| Cores | 16 CPU | 12 CPU | 8 CPU | 4 CPU |
| Number of Disks | 4 | 4 | 4 | 4 |
| Operating System Disk | 160 GB | 160 GB | 160 GB | 160 GB |
| SQL Database Disk | 500 GB | 320 GB | 240 GB | 100 GB |
| SQL Transaction Log Disk | 120 GB | 100 GB | 80 GB | 40 GB |
| SQL TEMP DB Disk | 320 GB | 240 GB | 160 GB | 80 GB |