After migrating to a new App-V Management Server our AppV Admins lost their permissions to the Management Server.
Strange, because during installation the correct security group was provided.
First place to look is the AppV database.
The table “RoleAssignments” must contain the SID(s) of the AppV Admins security group(s).
This was the case, the SID of this security group was the one used during the Management Server installation, nothing wrong here.
A security group SID can be obtained with Powershell:
Import-Module ActiveDirectory
Get-ADGroup -Identity SP_APPV_Administrators_U | select SID
These SID’s match.
Solution
We moved our AppV DB from a local SQL instance to a remote instance. Previously the NetworkService was used. But the NetworkService don’t have the same permisions on a remote SQL instance. Providing a service account, that of course has permissions to the AppV Mgmt DB (and eventually the Reporting database), was the solution.
