Installation and Configuration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server 5  >  BlackBerry Enterprise Server for Microsoft Exchange  >  Installation and Configuration Guide BlackBerry Enterprise Server for Microsoft Exchange - 5.0

Configuring minimum Microsoft SQL Server permissions for the Windows account

The BlackBerry® Enterprise Server setup application requires the Windows® account that it uses during the installation process or upgrade process to have Microsoft® SQL Server® permissions to create or upgrade the BlackBerry Configuration Database. The setup application requires the Windows account to have more Microsoft SQL Server permissions to install the BlackBerry Enterprise Server than the BlackBerry Enterprise Server requires to run.

After the installation or upgrade process completes, you can change the Microsoft SQL Server permissions of the Windows account to the Microsoft SQL Server permissions that the BlackBerry Enterprise Server requires to run. When you change the Microsoft SQL Server permissions of the Windows account, you can use Microsoft SQL Server security to minimize the operations that the Windows account can perform on the BlackBerry Configuration Database.

The following table describes the Microsoft SQL Server permissions for the setup application and the Windows account that the BlackBerry Enterprise Server uses to run.

Server and database roles

Description

db_owner

The setup application requires this role to install and upgrade the BlackBerry Configuration Database, BlackBerry MDS Integration Service database, and BlackBerry Monitoring Service database.

You can remove this role from the Windows account that the BlackBerry Enterprise Server uses to run after the setup application creates or upgrades the BlackBerry Configuration Database.

rim_db_bes_server

The BlackBerry Enterprise Server requires this role to run the BlackBerry Enterprise Server services. The setup application or the createDB executable creates the role automatically when it creates the BlackBerry Configuration Database.

This role is the minimum Microsoft SQL Server permission for running the BlackBerry Enterprise Server.

Configure minimum Microsoft SQL Server permissions for the Windows account

You can configure the minimum Microsoft® SQL Server® permissions for the Windows® account that the BlackBerry® Enterprise Server uses to run.
  1. Open the Microsoft SQL Server console.
  2. Expand Microsoft SQL Server > Security > Logins.
  3. Right-click the Windows account that the BlackBerry Enterprise Server uses to run. Click Properties.
  4. Map the Windows account to the BlackBerry Configuration Database.
  5. Change the Database role membership to rim_db_bes_server.
  6. Remove all other database role memberships.
  7. Apply your changes.
Next topic: Changing the BlackBerry Configuration Database
Previous topic: Restrict database permissions for the BlackBerry Attachment Service

Was this information helpful? Send us your comments.