I understand that the MCMS service accounts needs to have db_owner rights to
the MCMS database. There has been a policy change in the company not allowin
g
db_owner rights for any database and DBAs are questioning why the db_owner
rights are needed.

So my question is,
Is it possible to run the service account with a lesser priviledge than the
db_owner rights? Or Can some one explain the need for db_owner rights? ( I
assume the service account can create database entities by having db_owner
rights.)

Thanks,
Aby.

[ Post a follow-up to this message ]

Hi Aby,

the MCMS system account doesn't require DBO rights as the MCMS system
account does not create databases.
As listed in the MCMS documentation it requires db_datareader, db_datawriter
and ddl_admin rights.

Cheers,
Stefan

"A Louis" <ALouis@discussions.microsoft.com> wrote in message
news:F2FC65A6-C5ED-4624-AFC8-7DEAF6B7ED92@microsoft.com...
>I understand that the MCMS service accounts needs to have db_owner rights
>to
> the MCMS database. There has been a policy change in the company not
> allowing
> db_owner rights for any database and DBAs are questioning why the db_owner
> rights are needed.
>
> So my question is,
> Is it possible to run the service account with a lesser priviledge than
> the
> db_owner rights? Or Can some one explain the need for db_owner rights? ( I
> assume the service account can create database entities by having db_owner
> rights.)
>
> Thanks,
> Aby.

[ Post a follow-up to this message ]