Issues viewing Core Performance after removing SysAdmin from our App ID account

Products

• IT Management Suite
• Client Management Suite

Issue/Introduction

Company Policy has changed and we need to remove SysAdmin rights from our Application Identity (App ID) account.  After doing this, we are no longer able to see some of the Core Performance columns.  What permissions can we add back so that Core Performance works properly?

Environment

IT Management Suite 8.x.x

Resolution

We run a SQL query to get the details of the Core Performance 'report'.  The SQL Query is: 

SELECT top 1 [record]    FROM sys.dm_os_ring_buffers WHERE ring_buffer_type = N'RING_BUFFER_SCHEDULER_MONITOR' AND record LIKE '%<SystemHealth>%' order by timestamp desc
select top 1 ssm.total_physical_memory_kb, ssm.available_physical_memory_kb, ssi.cpu_count FROM sys.dm_os_sys_memory ssm cross join sys.dm_os_sys_info ssi
select count(*) as [Count] from sys.sysprocesses sp where DB_NAME(sp.dbid) = DB_NAME()

If you can run that query while accessing SQL as the App ID user, Core Performance will work properly.  It may generate errors such as: 

Msg 300, Level 14, State 1, Line 1
VIEW SERVER PERFORMANCE STATE permission was denied on object 'server', database 'master'.
Msg 297, Level 16, State 1, Line 1
The user does not have permission to perform this action.
Msg 300, Level 14, State 1, Line 2
VIEW SERVER PERFORMANCE STATE permission was denied on object 'server', database 'master'.
Msg 297, Level 16, State 1, Line 2
The user does not have permission to perform this action.

The DBA made the following changes which cleared up the errors above: 

Change the permissions for the service accounts: “added master table mapping to the user with 'view' granted and also grant 'View Any Database', 'View Server Performance' & 'View Server Security' .