In order to read data from the ConfigMgr database an account with at least read access to the database is required. This can be an Active Directory user or a SQL user account. In this example we are using an Active Directory user account. As a best practice this account should be a dedicated service account following the principle of least privilege.