Configuring database permissions using 

Microsoft SQL Server

 roles

The setup application requires the service account or 

Microsoft SQL Server

 account that it uses during the installation or upgrade process to have permissions on the database server to create or upgrade the 

BlackBerry UEM

 database. After the installation or upgrade process completes, you can change the database permissions for the service account or 

Microsoft SQL Server

 account to the minimum permissions that 

BlackBerry UEM

 requires to run.

When you change the database permissions, you can use 

Microsoft SQL Server

 security to minimize the operations that the service account or 

Microsoft SQL Server

 account can perform on the 

BlackBerry UEM

 database. The 

Microsoft SQL Server

 roles that are required by the setup application and 

BlackBerry UEM

 are as follows:

Database role	Description
db_owner	The setup application or CreateDB automatically adds the account that you use to create the  BlackBerry UEM  database to this role. This role contains the minimum permissions that the setup application or CreateDB requires to upgrade the  BlackBerry UEM  database.