Forum Discussion

apereira_py's avatar
13 years ago

Symantec Vault permissions on SQL

I'm installing Symantec Vault and i'm aware that as part of the prerequisites it ask for the following permissions on the SQL where the ddbb of the Vault will be created:

GRANT VIEW SERVER STATE TO "domain\vsa_account"
GRANT ALTER ANY LOGIN TO "domain\vsa_account"
 

You can see here how to create the SQL login and grant the permissions:

http://www.symantec.com/business/support/index?page=content&id=HOWTO57948

 

But my problem is that i need specific documentation to justify why Symantec Vault needs such a huge permission as "ALTER ANY LOGIN". My DBA won't give me this permission just like that.

I notice that it when doing the prequisites checklist vía the Vault installer it gives a warning indicating that this role is not assigned..i assume it's not so critical because it just warns me (doesn't give an error like other points).

 

What is the impact of not having this permission assigned?. What won't work? Is there any official documentation that says why does it need this perms? (all i saw there was how to grant and howto revoke)

Tks!

  • Adding or removing ALTER ANY LOGIN permission for the Vault Service account

    If the Enterprise Vault databases are on Microsoft SQL Server 2008, you must grant ALTER ANY LOGIN permission to the Vault Service account before you run the Reporting Configuration utility. You may remove this permission from the Vault Service account when you have quit the Reporting Configuration utility.

     

    http://www.symantec.com/business/support/index?page=content&id=HOWTO28087

2 Replies

  • Adding or removing ALTER ANY LOGIN permission for the Vault Service account

    If the Enterprise Vault databases are on Microsoft SQL Server 2008, you must grant ALTER ANY LOGIN permission to the Vault Service account before you run the Reporting Configuration utility. You may remove this permission from the Vault Service account when you have quit the Reporting Configuration utility.

     

    http://www.symantec.com/business/support/index?page=content&id=HOWTO28087

    • Ronen_Tzimbel's avatar
      Ronen_Tzimbel
      Level 6

      Hello,

      is it possible to revoke Permission -ALTER ANY LOGIN 

      on Enterprise vault 12.3 With Sql 2016 (Our customer dont working With Enterprise Vault Reporting)

      many thanks Ronen