Search <book_title>...

Enterprise Vault™ Installing and Configuring

Last Published: 2018-04-09

Product(s): Enterprise Vault (12.3)

Creating a SQL login account

The Vault Service account must have a SQL login account for the SQL Server, with the required permissions. The following procedure describes how to create this login account.

Note:

If you have made the Vault Service account a member of an Active Directory group, you can also follow the procedure below to create a SQL login account for this group rather than the Vault Service account. However, the group's SQL login account requires extra roles and permissions that the login account for the Vault Service account does not require.

See Assigning the required SQL Server roles and permissions to an Active Directory group.

To create a SQL login account

Start SQL Server Management Studio.
In the Object Explorer, select Security > Logins.
Right-click Logins, and select New Login.
Enter the Vault Service account as domain\username, or click Search and search for the account. In the search dialog box, ensure that the correct domain is entered in the Locations box.
Select Windows authentication.
In the Select a page pane, click Server Roles.
Select the check box beside dbcreator.
Click OK.
In the toolbar, click New Query.

Enter the following script:

use Master
GRANT VIEW SERVER STATE TO "domain\vsa_account"
GRANT ALTER ANY LOGIN TO "domain\vsa_account"
GRANT VIEW ANY DEFINITION TO "domain\vsa_account"
GO

Where domain\vsa_account is the domain and name of the Vault Service account.

Click Execute.
Verify that the Vault Service account has the dbcreator role as follows:
- In the Object Explorer, select Security > Server Roles.
- In the right-hand pane, double-click the dbcreator role.
- Ensure that the Vault Service account is in the membership list.
Verify that the Vault Service account has the correct permissions as follows:
- In the Object Explorer, right-click the top-level SQL Server object and then select Properties.
- Select the Permissions page.
- Under Logins or roles, select the Vault Service account and then click Effective Permissions. Check that VIEW SERVER STATE, ALTER ANY LOGIN, and VIEW ANY DEFINITION are included in the list of permissions.