Configuring database permissions using Microsoft SQL Server roles
The setup application requires the service account or Microsoft SQL Server account that it uses during the installation or upgrade process to have permissions on the database server to create or upgrade the BlackBerry UEM database. After the installation or upgrade process completes, you can change the database permissions for the service account or Microsoft SQL Server account to the minimum permissions that BlackBerry UEM requires to run.
When you change the database permissions, you can use Microsoft SQL Server security to minimize the operations that the service account or Microsoft SQL Server account can perform on the BlackBerry UEM database. The Microsoft SQL Server roles that are required by the setup application and BlackBerry UEM are as follows:
|
Database role |
Description |
|---|---|
|
db_owner |
The setup application or CreateDB automatically adds the account that you use to create the BlackBerry UEM database to this role. This role contains the minimum permissions that the setup application or CreateDB requires to upgrade the BlackBerry UEM database. |