Installation and Configuration Guide | Postinstallation tasks |
Configuring minimum Microsoft SQL Server permissions for the Windows account
The BlackBerry Enterprise Server setup application requires the Windows account that it uses during the installation process or upgrade process to have Microsoft SQL Server permissions to create or upgrade the BlackBerry Configuration Database. The setup application requires the Windows account to have more Microsoft SQL Server permissions to install the BlackBerry Enterprise Server than the BlackBerry Enterprise Server requires to run.
After the installation or upgrade process completes, you can change the Microsoft SQL Server permissions of the Windows account to the Microsoft SQL Server permissions that the BlackBerry Enterprise Server requires to run. When you change the Microsoft SQL Server permissions of the Windows account, you can use Microsoft SQL Server security to minimize the operations that the Windows account can perform on the BlackBerry Configuration Database.
The following table describes the Microsoft SQL Server permissions for the setup application and the Windows account that the BlackBerry Enterprise Server uses to run.
Server and database roles | Description |
|
|
db_owner | The setup application requires this role to upgrade the BlackBerry Configuration Database. |
| This role is the default permission in Microsoft SQL Server for running the BlackBerry |
| Enterprise Server. |
|
|
rim_db_bes_server | The setup application or the createDB executable creates the role automatically when it |
| creates the BlackBerry Configuration Database. |
| This role is the minimum permission in Microsoft SQL Server for running the BlackBerry |
| Enterprise Server. |
|
|
Configure minimum Microsoft SQL Server permissions for the Windows account
You can configure the minimum Microsoft SQL Server permissions for the Windows account that the BlackBerry Enterprise Server uses to run.
1.Open the Microsoft SQL Server console.
2.Expand Microsoft SQL Server > Security > Logins.
3.
4.Map the Windows account to the BlackBerry Configuration Database.
78
