Accounts for work with the DBMS

The following tables provide information about how selecting a database management system (DBMS) affects the properties of accounts chosen for work with the DBMS.

A local DBMS is a DBMS installed on the same device as Administration Server. A remote DBMS is a DBMS installed on a different device.

Please grant all rights required for the Administration Server account before you start the Administration Server service.

SQL Server with Windows authentication and with SQL Server authentication

DBMS: SQL Server (including Express Edition) with Windows authentication

DBMS location

Local

Local

Remote

Remote

Who creates the KAV database

The installer (automatically)

Administrator (manually)

The installer (automatically)

Administrator (manually).

Account under which the installer is running

Local or domain

Local or domain

Domain

Domain.

Rights of the account under which the installer is running

  • System: Local administrator rights
  • SQL Server: System administrator role
  • System: Local administrator rights
  • SQL Server:

    Server-level roles: public and dbcreator

    VIEW ANY DEFINITION permission

    VIEW SERVER STATE permission (if AlwaysOn is set)

    For master and tempdb databases: public role and dbo schema

    For KAV database (only if an existing KAV database is used): db_owner role and dbo schema

  • System: Local administrator rights
  • SQL Server: Sysadmin role
  • System: Local administrator rights.
  • SQL Server:

    Server-level roles: public and dbcreator

    VIEW ANY DEFINITION permission

    VIEW SERVER STATE permission (if AlwaysOn is set)

    For master and tempdb databases: public role and dbo schema

    For KAV database (only if an existing KAV database is used): db_owner role and dbo schema

Administration Server account

  • Created automatically in KL-AK-* format
  • Local account selected by the administrator
  • Domain account selected by the administrator
  • Created automatically in KL-AK-* format
  • Local account selected by the administrator
  • Domain account selected by the administrator

Domain.

Domain.

Rights of the Administration Server service account

  • System: required rights assigned by the installer
  • SQL Server: required rights assigned by the installer
  • System: Required rights assigned by the installer.
  • SQL Server:

    Server-level role: public

    VIEW ANY DEFINITION permission

    VIEW SERVER STATE permission (if AlwaysOn is set)

    For master and tempdb databases: public role and dbo schema

    For KAV database: db_owner role and dbo schema

  • System: required rights assigned by the installer
  • SQL Server: required rights assigned by the installer
  • System: Required rights assigned by the installer.
  • SQL Server:

    Server-level role: public

    VIEW ANY DEFINITION permission

    VIEW SERVER STATE permission (if AlwaysOn is set)

    For master and tempdb databases: public role and dbo schema

    For KAV database: db_owner role and dbo schema

DBMS: SQL Server (including Express Edition) with SQL Server authentication

DBMS location

Local.

Remote.

Who creates the KAV database

Administrator (manually) or the installer (automatically).

Administrator (manually) or the installer (automatically).

Account under which the installer is running

Local.

Domain.

Rights of the account under which the installer is running

  • System: Local administrator rights.
  • SQL Server: Installer account does not require access to SQL Server.
  • System: Local administrator rights.
  • SQL Server: Installer account does not require access to SQL Server.

Administration Server service account

Local or domain.

Domain.

Rights of the Administration Server service account

  • System: Required rights assigned by the installer.
  • SQL Server: Administration Server service account does not require access to SQL Server.
  • System: Required rights assigned by the installer.
  • SQL Server: Administration Server service account does not require access to SQL Server.

Additional information

The administrator explicitly specifies in the installer a SQL Server internal account that requires the sysadmin role.

The administrator explicitly specifies in the installer a SQL Server internal account that requires the sysadmin role.

MySQL

DBMS: MySQL

DBMS location

Local or remote.

Local or remote.

Who creates the KAV database

The installer (automatically).

Administrator (manually).

Account under which the installer is running

Local or domain.

Local or domain.

Rights of the account under which the installer is running

  • System: Local administrator rights.
  • MySQL Server: Installer account does not require access to MySQL.
  • System: Local administrator rights.
  • MySQL Server: Installer account does not require access to MySQL.

Administration Server service account

Local or domain.

Local or domain.

Rights of the Administration Server service account

  • System: Required rights assigned by the installer.
  • MySQL Server: Administration Server service account does not require access to MySQL.
  • System: Required rights assigned by the installer.
  • MySQL Server: Administration Server service account does not require access to MySQL.

Additional information

The administrator explicitly specifies in the installer a SQL Server internal account that requires root access.

The administrator explicitly specifies in the installer a MySQL internal account that requires GRANT ALL for the KAV database and SELECT, SHOW VIEW, or PROCESS for the system tables. Required permissions for MySQL Server are:

  • SELECT
  • INSERT
  • UPDATE
  • DELETE
  • CREATE
  • DROP
  • PROCESS
  • REFERENCES
  • INDEX
  • ALTER
  • SHOW DATABASES
  • CREATE TEMPORARY TABLES
  • LOCK TABLES
  • EXECUTE
  • CREATE VIEW
  • SHOW VIEW
  • CREATE ROUTINE
  • ALTER ROUTINE
  • EVENT
  • TRIGGER
  • SUPER

    The SUPER permission is required only for restoring from a backup.

MariaDB

DBMS: MariaDB

DBMS location

Local or remote.

Local or remote.

Who creates the KAV database

The installer (automatically).

Administrator (manually).

Account under which the installer is running

Local or domain.

Local or domain.

Rights of the account under which the installer is running

  • System: Local administrator rights.
  • MariaDB Server: Installer account does not require access to MariaDB.
  • System: Local administrator rights.
  • MariaDB Server: Installer account does not require access to MariaDB.

Administration Server service account

Local or domain.

Local or domain.

Rights of the Administration Server service account

  • System: Required rights assigned by the installer.
  • MariaDB Server: Administration Server service account does not require access to MariaDB.
  • System: Required rights assigned by the installer.
  • MariaDB Server: Administration Server service account does not require access to MariaDB.

Additional information

The administrator explicitly specifies in the installer a SQL Server internal account that requires root access.

The administrator explicitly specifies in the installer a MariaDB internal account that requires GRANT ALL for the KAV database and SELECT, SHOW VIEW, PROCESS for the system tables.

See also:

Main installation scenario

Page top