This security group is created during the installation or upgrade process, in the local machines. The UcceService group applies to Fresh Installations as well as all upgrades including Technology Refresh and other supported upgrade paths from an earlier releases.

The UcceService group is used to provide permissions and privileges to the service accounts associated with the Logger and Distributor services. For a new installation, the domain service accounts for the Logger and Distributor services must be added to this group. All the permissions required for the service accounts are configured for the UcceService group.

The UcceConfig group is created during the fresh installation in all local machines. For upgrades, this group already exists in local machines. The UcceConfig group is required only for Distributor machines.

The UcceConfig group is used to provide local authorization with the necessary permissions and privileges to the Unified CCE configuration users.

The permissions for registries and local folders must be configured manually. For steps to configure the permissions, see the Configuration Guide for Cisco Unified ICM/Contact Center Enterprise.

Setup users are domain users with local administrator permissions and can run the UCCE installer, Websetup, and Peripheral Gateway Setup tools.

To make a domain user a setup user, you have to manually add the domain user to the Local Administrators Group. This enables the domain user to perform the UCCE setup operations such as, running the Websetup and Peripheral Gateway Setup tools.

Note	Domain Administrators can perform UCCE setup operations such as, running the Websetup and Peripheral Gateway Setup tools.