Configuring database permissions using

Microsoft SQL Server

roles

The setup application requires the service account or

Microsoft SQL Server

account that it uses during the installation or upgrade process to have permissions on the database server to create or upgrade the

BlackBerry UEM

database. After the installation or upgrade process completes, you can change the database permissions for the service account or

Microsoft SQL Server

account to the minimum permissions that

BlackBerry UEM

requires to run.

When you change the database permissions, you can use

Microsoft SQL Server

security to minimize the operations that the service account or

Microsoft SQL Server

account can perform on the

BlackBerry UEM

database. The

Microsoft SQL Server

roles that are required by the setup application and

BlackBerry UEM

are as follows:

Database role	Description
db_owner	The setup application or CreateDB automatically adds the account that you use to create the BlackBerry UEM database to this role. This role contains the minimum permissions that the setup application or CreateDB requires to upgrade the BlackBerry UEM database.