Accounts for work with the DBMS

The following tables provide information about how selecting a database management system (DBMS) affects the properties of accounts chosen for work with the DBMS.

A local DBMS is a DBMS installed on the same device as Administration Server. A remote DBMS is a DBMS installed on a different device.

Please grant all rights required for the Administration Server account before you start the Administration Server service.

SQL Server with Windows authentication and with SQL Server authentication

DBMS: SQL Server (including Express Edition) with Windows authentication

DBMS location	Local	Local	Remote	Remote
Who creates the KAV database	The installer (automatically)	Administrator (manually)	The installer (automatically)	Administrator (manually)
Account under which the installer is running	Local or domain	Local or domain	Domain	Domain
Rights of the account under which the installer is running	System: Local administrator rights SQL Server: System administrator role	System: Local administrator rights SQL Server: Server-level roles: public and dbcreator `VIEW ANY DEFINITION` permission `VIEW SERVER STATE` permission (if the Always On feature is enabled) For the primary and tempdb databases: public role and dbo schema For KAV database (only if an existing KAV database is used): db_owner role and dbo schema	System: Local administrator rights SQL Server: Sysadmin role	System: Local administrator rights. SQL Server: Server-level roles: public and dbcreator `VIEW ANY DEFINITION` permission `VIEW SERVER STATE` permission (if the Always On feature is enabled) For the primary and tempdb databases: public role and dbo schema For KAV database (only if an existing KAV database is used): db_owner role and dbo schema
Administration Server account	Created automatically in KL-AK-* format Local account selected by the administrator Domain account selected by the administrator	Created automatically in KL-AK-* format Local account selected by the administrator Domain account selected by the administrator	Domain.	Domain.
Rights of the Administration Server service account	System: required rights assigned by the installer SQL Server: required rights assigned by the installer	System: Required rights assigned by the installer. SQL Server: Server-level role: public `VIEW ANY DEFINITION` permission `VIEW SERVER STATE` permission (if the Always On feature is enabled) For the primary and tempdb databases: public role and dbo schema For KAV database: db_owner role and dbo schema	System: required rights assigned by the installer SQL Server: required rights assigned by the installer	System: Required rights assigned by the installer. SQL Server: Server-level role: public `VIEW ANY DEFINITION` permission `VIEW SERVER STATE` permission (if the Always On feature is enabled) For the primary and tempdb databases: public role and dbo schema For KAV database: db_owner role and dbo schema

DBMS: SQL Server (including Express Edition) with SQL Server authentication

DBMS location	Local.	Remote.
Who creates the KAV database	Administrator (manually) or the installer (automatically).	Administrator (manually) or the installer (automatically).
Account under which the installer is running	Local.	Domain.
Rights of the account under which the installer is running	System: Local administrator rights. SQL Server: Installer account does not require access to SQL Server.	System: Local administrator rights. SQL Server: Installer account does not require access to SQL Server.
Administration Server service account	Local or domain.	Domain.
Rights of the Administration Server service account	System: Required rights assigned by the installer. SQL Server: Administration Server service account does not require access to SQL Server.	System: Required rights assigned by the installer. SQL Server: Administration Server service account does not require access to SQL Server.
Additional information	The administrator explicitly specifies in the installer a SQL Server internal account that requires the sysadmin role.	The administrator explicitly specifies in the installer a SQL Server internal account that requires the sysadmin role.

MySQL

DBMS: MySQL

DBMS location	Local or remote.	Local or remote.
Who creates the KAV database	The installer (automatically).	Administrator (manually).
Account under which the installer is running	Local or domain.	Local or domain.
Rights of the account under which the installer is running	System: Local administrator rights. MySQL Server: Installer account does not require access to MySQL.	System: Local administrator rights. MySQL Server: Installer account does not require access to MySQL.
Administration Server service account	Local or domain.	Local or domain.
Rights of the Administration Server service account	System: Required rights assigned by the installer. MySQL Server: Administration Server service account does not require access to MySQL.	System: Required rights assigned by the installer. MySQL Server: Administration Server service account does not require access to MySQL.
Additional information	The administrator explicitly specifies in the installer a SQL Server internal account that requires root access.	The administrator explicitly specifies in the installer a MySQL internal account that requires GRANT ALL for the KAV database and SELECT, SHOW VIEW, or PROCESS for the system tables. Required permissions for MySQL Server are: `SELECT` `INSERT` `UPDATE` `DELETE` `CREATE` `DROP` `PROCESS` `REFERENCES` `INDEX` `ALTER` `SHOW DATABASES` `CREATE TEMPORARY TABLES` `LOCK TABLES` `EXECUTE` `CREATE VIEW` `SHOW VIEW` `CREATE ROUTINE` `ALTER ROUTINE` `EVENT` `TRIGGER` `SUPER` The SUPER permission is required only for restoring from a backup.

MariaDB

DBMS: MariaDB

DBMS location	Local or remote.	Local or remote.
Who creates the KAV database	The installer (automatically).	Administrator (manually).
Account under which the installer is running	Local or domain.	Local or domain.
Rights of the account under which the installer is running	System: Local administrator rights. MariaDB Server: Installer account does not require access to MariaDB.	System: Local administrator rights. MariaDB Server: Installer account does not require access to MariaDB.
Administration Server service account	Local or domain.	Local or domain.
Rights of the Administration Server service account	System: Required rights assigned by the installer. MariaDB Server: Administration Server service account does not require access to MariaDB.	System: Required rights assigned by the installer. MariaDB Server: Administration Server service account does not require access to MariaDB.
Additional information	The administrator explicitly specifies in the installer a SQL Server internal account that requires root access.	The administrator explicitly specifies in the installer a MariaDB internal account that requires `GRANT ALL` for the KAV database and `SELECT`, `SHOW VIEW`, `PROCESS` for the system tables.