This article describes the SQL permissions needed to install and use ePO.

For instructions on how to access the Database Configuration page and obtain the following information, see KB51465 - How to set SQL authentication account information:

• Database server
• Server instance
• Database name
• Authentication type
• Username
• User password

New installation or upgrade to ePO 5.10
The account you use for a new installation of ePO must have the following server roles:

• Public
• Dbcreator—After the database is installed, you can remove the dbcreator role from the ePO SQL user.

The account used for everyday operations must ideally have the following database roles:

• Public
• db_owner

If you do not want to use the db_owner role for the account that you use to access the ePO database, follow the steps below:

1. Create a database role on the ePO database:
   1. Log on to SQL Management Studio with an account that has Administrator rights.
   2. Under the SQL Server that hosts the ePO database, expand Databases.
   3. Expand the ePO database, Security, Roles, Database Roles.
   4. Right-click Database Roles and click New Database Role.
   5. Type db_execute as the Role Name and click OK.
       
2. Grant Execute permissions to the new role:
   1. Click New Query from the toolbar.
   2. Select the ePO database from the Available Databases drop-down list.
   3. In the query window, enter the following command:
      
      GRANT EXECUTE TO db_execute
   
   
   4. Click Execute or press F5 to run the query.
      
      NOTE: Make sure that the following message displays in the Messages box:
      
      "Command(s) completed successfully".
       
3. Map the account to the database roles:
   1. Expand Security, Logins under the SQL Server that hosts the ePO database.
   2. Right-click the account that you want ePO to use to access the database, and click Properties.
   3. Click User Mapping under Select A Page.
   4. Select the ePO database under the Map column.
   5. In the lower part of the window, select the following roles:
      • db_datareader
      • db_datawriter
      • db_ddladmin
      • db_execute
      • Public
         
   6. Click OK.