The Goliath Performance Monitor Prerequisites article references two service accounts that require local Windows Administrator rights. The first one being on the Goliath Server and the second one being on the Citrix Delivery Controller. See the applicable section(s) below for an explanation on why Windows Administrator rights are required on those machine.
Goliath Server
The Goliath Server houses the Goliath Performance Monitor application and web server which is driven by the MonitorIT Server Service. By default, this service runs as LocalSystem. However, if the technology is configured with a remote SQL Server, the MonitorIT Server Service is then also leveraged for authentication and communication to the SQL Server. Therefore, it must be configured to run as a windows account that has the SQL database role membership of db_owner to the Goliath database, instead of LocalSystem.
Unlike LocalSystem and Administrators, standard authenticated users do not have the necessary permissions to start/stop a service. Therefore, in order for the MonitorIT Server Service to run as the SQL db_owner user, this account must be added to the local Windows Administrator group on the machine. For full details reference Windows Service Security and Access Rights.
Citrix Delivery Controller
For Citrix Virtual Application and Desktop monitoring within Goliath Performance Monitor, the Goliath Intelligent Agent is installed onto the Citrix Delivery Controller along with the relevant application servers, virtual desktop machines and other Citrix infrastructure servers. The Goliath Intelligent Agent installs as the MonitorIT Agent Service. By default, this service runs as LocalSystem. However, in order to make the appropriate Citrix API calls, the MonitorIT Agent Service is leveraged for authentication and communication to Citrix on one Citrix Delivery Controller per Citrix Site. Therefore, on the one Citrix Delivery Controller per site, it must be configured to run as a windows account that has Read Only Admin rights within Citrix Studio, instead of LocalSystem.
Unlike LocalSystem and Administrators, standard authenticated users do not have the necessary permissions to start/stop a service. Therefore, in order for the MonitorIT Agent Service to run as the Citrix user, this account must be added to the local Windows Administrator group on the machine. For full details reference Windows Service Security and Access Rights.