Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How Do We Assign the Required Permissions to Our App Control Server Service Account in SQL?

App Control: How Do We Assign the Required Permissions to Our App Control Server Service Account in SQL?

Environment

  • App Control Server: All Versions
  • Microsoft SQL Server: All Supported Versions

Objective

To assign the required permissions to the App Control Server service account in SQL.

Resolution

Assign the Relevant Roles: (Required for installation or upgrades)
  1. Launch SQL Server Management Studio and connect to the SQL Server.
  2. Expand the Security folder > Logins
  3. Right click the App Control Service Account > Properties > Server Roles
  4. Check sysadmin and click OK.

Assign the Relevant Securables: (Required at all times)
  1. Launch SQL Server Management Studio and connect to the SQL Server.
  2. Click New Query and run the following scripts:
    use das;
    GRANT ALTER TRACE TO "App Control Service Account"
    GRANT VIEW ANY DEFINITION TO "App Control Service Account"
    GRANT VIEW SERVER STATE TO "App Control Service Account"
    GRANT ALTER SERVER STATE TO "App Control Service Account"

Additional Notes

  • DB_OWNER permissions on das is automatically assigned to the Service Account during database creation, and should never be removed.
  • There should be an active SA account in SQL or the install may fail with "a critical database script".

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎11-03-2014
Views:
5762
Contributors