SQL Role assignments needed

Article: 100018100
Last Published: 2021-10-04
Ratings: 1 1
Product(s): Enterprise Vault

Problem

While running Deployment Scanner or Veritas Quick Assist under Vault Service Account (VSA) logon, it fails on SQL - VIEW SERVER STATE Permission.

Event 13360 is generated when Enterprise Vault (EV), via the Vault Service Account (VSA), attempts to query the SQL database for metadata information during the scheduled Status Checks, that populate the Status section of the Vault Admin Console (VAC)

The Status section of the VAC reports errors on all checks that query SQL metadata.

Invalid User, please specify valid credentials of the Monitoring User, while running the EV Operations Manager Configuration Wizard 

Error Message

Event ID: 13360
Category: Storage Management
Description: An error was detected while accessing the Vault Database 'EVDATABASE' (Internal reference: .\ADODataAccess.cpp (CADODataAccess::ExecuteSQLCommand)

Description:The user does not have permission to perform this action.


SQL Command: usps_GetTransactionLogSize
Source: Microsoft OLE DB Provider for SQL Server
Number: 0x80040e14
SQL State: 42000
Native Error: 00000297
HRESULT 0x80040e14
V-437-13360

Cause

By default the VSA will not have access to certain procedures that query meta data on the SQL Server where the EV Directory and Vault Store databases reside.

Solution

Modify the permissions of the VSA via the Microsoft SQL Server Management Studio (SSMS) to grant VIEW SERVER STATE.

1. Login to the SQL Server and Open the SSMS
2. Right click on the 'server name' and choose properties
3. In the left hand pane choose Permissions
4. In the right hand pane scroll to the VSA
5. Below the user accounts choose the tab Effective
6. Ensure VIEW SERVER STATE is present
7. If not, grant VIEW SERVER STATE
    a. Choose the Explicit tab and Grant the VIEW SERVER STATE permission
    b. Choose OK, changes are immediate
8. Re-run all checks in Vault Admin Console


Note: The permissions can be granted via query using the following statement.  Be sure to execute this statement under the master database.

GRANT VIEW SERVER STATE TO "DOMAIN\VSA"

More information regarding this can be found at https://msdn2.microsoft.com/en-us/library/ms189768.aspx

Was this content helpful?