Installation Guide › Installing CA Virtual Assurance › How to Adjust SQL Server User Permissions to the Required Minimum › Adjust the Permissions of the New Database User to the Required Minimum

Adjust the Permissions of the New Database User to the Required Minimum

CA Virtual Assurance requires a database user with sufficient permissions to use the aom2 and dpm databases. This procedure describes how to adjust these permissions to a minimum.

Windows Authentication

Follow these steps:

1. Log in SQL Server using administrator (sa) permissions or the local system administrator.
2. In the SQL Server Management Studio, expand Security, Logins in the Object Explorer.
3. Right-click the new user (for example, my_domain\my_account) and open Properties, User Mappings.

   The User Mapping dialog appears.

4. Select the aom2 database in the dialog and assign db_datareader and db_datawriter role memberships.
5. Select the dpm databases in the dialog and assign db_datareader and db_datawriter role memberships. Click OK.
6. Click New Query.

   The SQL console opens.

7. To allow the new database user (my_domain\my_account) the execution of stored procedures, enter the following SQL commands:

   use dpm
   GRANT EXECUTE TO "my_domain\my_account"
   use aom2
   GRANT EXECUTE TO "my_domain\my_account"
   

8. Click Execute.
9. Right-click the new user (my_domain\my_account) in the Object Explorer and open Properties, Server Roles.

   The Server Roles dialog appears.

10. Remove the dbcreator role and click OK.

    The new database user provides sufficient permissions to CA Virtual Assurance to use the aom2 and dpm databases.

SQL Server Authentication

Follow these steps:

1. Log in SQL Server using administrator (sa) permissions.
2. In the SQL Server Management Studio, expand Security, Logins in the Object Explorer.
3. Right-click the new user (for example, causer) and open Properties, User Mappings.

   The User Mapping dialog appears.

4. Select the aom2 and dpm databases in the dialog and assign db_datareader and db_datawriter role memberships to both databases. Click OK.
5. Click New Query.

   The SQL console opens.

6. To allow the new database user (causer) the execution of stored procedures, enter the following SQL commands:

   use dpm
   GRANT EXECUTE TO causer
   use aom2
   GRANT EXECUTE TO causer
   

7. Click Execute.
8. Right-click the new user (causer) in the Object Explorer and open Properties, Server Roles.

   The Server Roles dialog appears.

9. Remove the dbcreator role and click OK.

   The new database user provides sufficient permissions to CA Virtual Assurance to use the aom2 and dpm databases.