Log Database permissions

Before you begin

Microsoft SQL Server Standard and Enterprise editions define SQL Server Agent roles that govern accessibility of the job framework. The SQL Server Agent jobs are stored in the SQL Server msdb database.

To install Log Server successfully, the user account that owns the web protection database must have adequate permissions to create the Log Database. This account then becomes database owner.

If you are using Microsoft SQL Server 2008, 2008 R2, 2012, 2014, or 2016 Standard or Enterprise, the database owner account must:

  1. Be a member of the dbcreator fixed server role.
  2. Have membership in one of the following roles in the msdb database:
    • SQLAgentUserRole
    • SQLAgentReaderRole
    • SQLAgentOperatorRole
  3. Have membership in the db_datareader role

For SQL Server Express, the account requires the sysadmin server role.

Use Microsoft SQL Server Management Studio to grant the database user account the necessary permissions to successfully install Log Server.

Steps

  1. On the SQL Server machine, launch SQL Server Management Studio.
  2. Select the Object Explorer tree, and then select Security > Logins.
  3. Select the login account to be used during Log Server installation.
  4. Right-click the login account and select Properties for this user.
  5. Select User Mapping and do the following:
    1. Select msdb in database mapping.
    2. Grant membership to one of these roles:
      • SQLAgentUserRole
      • SQLAgentReader Role
      • SQLAgentOperator Role
    3. Grant membership to the db_datareader role.
    4. Click OK to save your changes.
  6. Select Server Roles, and then select dbcreator. The dbcreator role is created.
  7. Click OK to save your changes.