The EMU installer will attempt to add the following permissions for the Service to the provided Group and Endpoints OUs:
- Generic Read
- Generic Write
- Delete Child Objects
- Create Child Objects
If the account used to install the EMU server does not have permissions to grant these rights to the EMU Server Service Account this step will fail, however, the installer will simply log the error and continue (non-fatal error). In this case, you must work with someone in your organization to manually grant these permissions to the OUs so that the EMU server can successfully process jobs that need these permissions.
These permissions are granted in place of needing to give each user these permissions.