Installation guide

Configuring minimum Microsoft SQL Server permissions for the Windows

account

The BlackBerry® Enterprise Server setup application requires the Windows® account that it uses during the installation process

or upgrade process to have Microsoft® SQL Server® permissions to create or upgrade the BlackBerry Configuration Database.

The setup application requires the Windows account to have more Microsoft SQL Server permissions to install the BlackBerry

Enterprise Server than the BlackBerry Enterprise Server requires to run.

After the installation or upgrade process completes, you can change the Microsoft SQL Server permissions of the Windows account

to the Microsoft SQL Server permissions that the BlackBerry Enterprise Server requires to run. When you change the Microsoft

SQL Server permissions of the Windows account, you can use Microsoft SQL Server security to minimize the operations that the

Windows account can perform on the BlackBerry Configuration Database.

The following table describes the Microsoft SQL Server permissions for the setup application and the Windows account that the

BlackBerry Enterprise Server uses to run.

Server and database roles Description

db_owner The setup applicaton requires this role to install and upgrade the BlackBerry

Configuration Database, BlackBerry MDS Integration Service database, and

BlackBerry Monitoring Service database.

You can remove this role from the Windows account that the BlackBerry Enterprise

Server uses to run after the setup application creates or upgrades the BlackBerry

Configuration Database.

rim_db_bes_server The BlackBerry Enterprise Server requires this role to run the BlackBerry Enterprise

Server services. The setup application or the createDB executable creates the role

automatically when it creates the BlackBerry Configuration Database.

This role is the minimum Microsoft SQL Server permission for running the BlackBerry

Enterprise Server.

Configure minimum Microsoft SQL Server permissions for the Windows account

You can configure the minimum Microsoft® SQL Server® permissions for the Windows® account that the BlackBerry® Enterprise

Server uses to run.

1. Open the Microsoft SQL Server console.

2. Expand Microsoft SQL Server > Security > Logins.

Upgrade Guide

Configuring minimum Microsoft SQL Server permissions for the Windows account