Minimal SQL Access Rights Required for ACM

This page provides instructions to create two different types of users in SQL Server for ACM. One user has only the permissions required for ACM to run; the other has the permissions required for ACM to run and permissions to create and modify ACM database objects.

1 Non-privileged User | 2 Privileged User

Non-privileged User

These instructions detail the minimum permissions required for all ACM services to interact with the database. They assume the ACM database and all necessary objects exist. This user cannot perform database updates via ACM Monitor nor can they execute database updates during a new install or ACM Upgrade.

Create a login on the server level per corporate requirements.
On the “User Mapping” tab:
1. Check the checkbox next to the ACM database
2. Make sure the default schema is “dbo”.
3. Check the following roles in the “Database membership roles” box below the “Users Mapped to this login” label
  1. db_datareader
  2. db_datawriter
  3. public
Select the “Securables” tab.
With the server highlighted, select the “Grant” checkbox next to “View server state”. (This permission allows the user to view the Database Statistics in ACM).
Click OK.
Refresh the “Security/Users” folder in the ACM database,
Right click the user you just created and choose “Properties”.
Select the “Securables” tab.
Add the other ACM required permissions for the Bulk Manager and Archive Management processes:
1. Click the “Search” button
2. Choose the “Specific Types” option
3. Click OK
4. Search for Object types “Tables”
5. Click the “Browse” button
6. Select the following tables:
  1. EdgeEFMConfigurationErrors
  2. tblArchiveStaging
  3. tblCommStatsStaging
  4. tblDailySummary
  5. tblHourlySummary
  6. tblItemStaging
  7. tblPubStaging
7. Click “OK”
8. For each table, check the “Grant” checkbox next to the “Alter” permission.
9. Click OK.

Privileged User

These instructions include the minimum permissions required to perform ACM database updates and run ACM services. They assume an empty database has already been created on the server, but the tables and objects in the database have not been created.

Create a login on the server level per corporate requirements.
On the “User Mapping” tab,
1. Check the checkbox next to the ACM database
2. Make sure the default schema is “dbo”.
3. Check the following roles in the “Database membership roles” box below the “Users Mapped to this login” label
  1. db_datareader
  2. db_datawriter
  3. public
Select the “Securables” tab
With the server highlighted, select the “Grant” checkbox next to “View server state”. (This permission allows the user to view the Database Statistics in ACM).
Click OK.
Refresh the “Security/Users” folder in the ACM database,
Right click the user you just created and choose “Properties”.
Select the “Securables” tab.
Add the “Control” permission for the ACM database:
1. Click the “Search” button
2. Choose the “Specific Types” option,
3. Click OK,
4. Search for Object types “Database”
5. Click the “Browse” button
6. Select the ACM database you are working with
7. Click “OK”. The database will show up in the “Securables” grid.
8. With the database securable selected, check the “Grant” checkbox next to “Control”.
Click OK