ecff48ad_ion_using_Domain_User_Accounts__2
[0] SSP application pool account [1] Application pool identity for the shared services administration Web application. [3] No manual configuration is necessary. The following are automatically configured: - Membership in the db_owner role for the SSP content database. - Access to read from and write to the SSP content database. - Access to read from and write to content databases for Web applications that are associated with the SSP. - Access to read from the configuration database. - Access to read from the Central Administration content database. - Additional permissions to front-end Web servers and application servers are automatically granted. [4] Server farm standard requirements with the following additions or exceptions: - Use a separate domain user account. - For security isolation, use a separate service account for each SSP. [5] Server farm standard requirements with the following additions or exceptions: - Use a separate domain user account. - NOT a member of the local Administrators group on any server in the farm, including the computer running SQL Server. - NOT a SQL Server login. [6] Server farm standard requirements with the following additions or exceptions: - Use a separate domain user account. - For security isolation, use a separate service account for each SSP. [2] 
No manual configuration is necessary.
MOSS How to ...: Starting and Configuring Office SharePoint Server Search for a web server with Least Privilege Administration using Domain User Accounts
2