Symantec Vault permissions on SQL

[apereira_py]

I'm installing Symantec Vault and i'm aware that as part of the prerequisites it ask for the following permissions on the SQL where the ddbb of the Vault will be created:

GRANT VIEW SERVER STATE TO "domain\vsa_account"
GRANT ALTER ANY LOGIN TO "domain\vsa_account"
 

You can see here how to create the SQL login and grant the permissions:

http://www.symantec.com/business/support/index?page=content&id=HOWTO57948

But my problem is that i need specific documentation to justify why Symantec Vault needs such a huge permission as "ALTER ANY LOGIN". My DBA won't give me this permission just like that.

I notice that it when doing the prequisites checklist vía the Vault installer it gives a warning indicating that this role is not assigned..i assume it's not so critical because it just warns me (doesn't give an error like other points).

What is the impact of not having this permission assigned?. What won't work? Is there any official documentation that says why does it need this perms? (all i saw there was how to grant and howto revoke)

Tks!

[JesusWept3 · Accepted solution]

Adding or removing ALTER ANY LOGIN permission for the Vault Service account

If the Enterprise Vault databases are on Microsoft SQL Server 2008, you must grant ALTER ANY LOGIN permission to the Vault Service account before you run the Reporting Configuration utility. You may remove this permission from the Vault Service account when you have quit the Reporting Configuration utility.

http://www.symantec.com/business/support/index?page=content&id=HOWTO28087

[Ronen_Tzimbel]

Hello,

is it possible to revoke Permission -ALTER ANY LOGIN 

on Enterprise vault 12.3 With Sql 2016 (Our customer dont working With Enterprise Vault Reporting)

many thanks Ronen