These accounts should not have more rights than they would need. It’s important to build the Active Directory service accounts and database access accounts with the principle of least privileged access in mind. This post will cover setting up the event database on Microsoft SQL Server. Horizon supports running the event database on Microsoft SQL Server and Oracle, and you can find the specific supported versions in the VMware Product Interoperability Matrix. This database is optional, but it is highly recommended. Horizon 8 utilizes a single database for storing event and auditing data generated by the platform.
The other service account will manage computer accounts within Active Directory, and this account is only required if you are using Instant Clones. One of these accounts is for accessing vCenter to provision and manage the virtual machines that users will connect to. Back in Part 4, I mentioned that Horizon required up to a few service accounts to function properly.