Configuring accounts for work with PostgreSQL and Postgres Pro

Prerequisites

Before you assign rights to the accounts, perform the following actions:

1. Make sure that you log in to the system under the local administrator account.
2. Install an environment for working with PostgreSQL and Postgres Pro.
3. Make sure that you have a Windows account under which you will install Administration Server.
4. Make sure that you have a Windows account under which you will start the Administration Server service.

Configuring the accounts to install Administration Server (automatic creation of the Administration Server database)

To configure the accounts for the Administration Server installation:

1. Run an environment for working with PostgreSQL and Postgres Pro.
2. Choose a Postgres role to access the DBMS. You can use one of the following roles:
   • The postgres user (the default Postgres role).

     If you use the postgres user, you do not need to grant additional rights to it.

   • A new Postgres role.

     If you want to use a new Postgres role, create this role, and then grant it the CREATEDB privilege. To do this, run the following script (in this script, the role is KCSAdmin):

     CREATE USER "KSCAdmin" WITH PASSWORD '<password>' CREATEDB;

     The created role will be used as an owner of the Administration Server database (hereinafter also referred to as the Server database).

3. Log in to the system under the Windows account used to run the Administration Server installer (hereinafter also referred to as the installer).
4. Run the installer.

   The Administration Server Setup wizard starts. Follow the instructions of the wizard.

5. Select the custom installation of Administration Server option.
6. Select the PostgreSQL or Postgres Pro as a DBMS that stores the Administration Server database.
7. Specify the Server database name. The installer will automatically create the Server database.
8. Specify the credentials of the Postgres role.
9. Specify the Windows account used to start the Administration Server service.

   You can select an existing Windows user account or automatically create a new Windows account in the KL-AK-* format by using the installer. Regardless of the account choice, the installer assigns the required system rights to the Administration Server service account.

After the installation finishes, the Server database is automatically created and Administration Server is ready to use.

Configuring the accounts to install Administration Server (manual creation of the Administration Server database)

To configure the accounts for the Administration Server installation:

1. Run an environment for working with Postgres.
2. Create a new Postgres role and an Administration Server database. Then, grant all privileges to the role on the Administration Server database. To do this, log in under the postgres user in the postgres database, and then run the following script (in this script, the role is KCSAdmin, the Administration Server database name is KAV):

   CREATE USER "KSCAdmin" WITH PASSWORD '<password>';

   CREATE DATABASE "KAV" ENCODING 'UTF8';

   GRANT ALL PRIVILEGES ON DATABASE "KAV" TO "KSCAdmin";

3. Grant the following privileges to the created Postgres role:
   • Privileges on all tables in the public schema: ALL
   • Privileges on all sequences in the public schema: ALL

   To do this, log in under the postgres user in the Server database, and then run the following script (in this script, the role is KCSAdmin):

   GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA "public" TO "KSCAdmin";

   GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA "public" TO "KSCAdmin";

4. Log in to the system under the Windows account used to run the installer.
5. Run the Administration Server installer.

   The Administration Server Setup wizard starts. Follow the instructions of the wizard.

6. Select the custom installation of Administration Server option.
7. Select the PostgreSQL or Postgres Pro as a DBMS that stores the Administration Server database.
8. Specify the Server database name. Use the same database name that you specify in the script. Note that the database name is case-sensitive.
9. Specify the credentials of the Postgres role.
10. Specify the Windows account used to start the Administration Server service.

    You can select an existing Windows user account or automatically create a new Windows account in the KL-AK-* format by using the installer. Regardless of the account choice, the installer assigns the required system rights to the Administration Server service account.

After the installation finishes, the Administration Server will use the created database to store the Administration Server data. Administration Server is ready to use.