BlackBerry UEM connects to the UEM database on the database server using the login information that you specified during the installation process (Windows authentication or Microsoft SQL Server authentication). If you want to use the setup application to upgrade UEM, the service account or Microsoft SQL Server account must have permissions on the database server. A regular Windows service account requires the db_owner permission to upgrade UEM.

If you want to use a group Managed Service Account (gMSA) to install UEM with Windows authentication database access, the service account requires dbcreator rights for the Microsoft SQL Server.

You can configure database permissions using Microsoft SQL Server roles. You must verify that the service account or Microsoft SQL Server account is a member of the dbcreator server role.