The SOAP Server user account needs to be a member of which security group in order for Key Management Services (KMS) licensing to be supported in a Provisioning Services deployment?

KMS licensing in a Provisioning Services environment requires that the SOAP Server service account be a member of the Local Administrators group on the PVS server. This elevated local permission is necessary because the SOAP Server must be able to interact with KMS activation infrastructure and manage licensing-related operations that require administrative privileges on the local machine.

Domain Administrator rights are broader than necessary and are not the documented requirement - Local Administrator membership is sufficient and the principle of least privilege applies.

Citrix Full Administrator is a role within Citrix Studio/Director for managing the Citrix Virtual Apps and Desktops site, not a Windows security group and not relevant to PVS SOAP Server KMS requirements.

Provisioning Services Full Administrator is a PVS console role controlling access to PVS management functions, not a Windows security group that grants the local OS permissions needed for KMS licensing.