Creating a SQL login account

The Vault Service account must have a SQL login account, with Database Creators permission, for the SQL Server. On SQL Server 2005 and later, the Vault Service account must also have View server state permission.

To create a SQL login account in SQL 2000

  1. Start Enterprise Manager for SQL 2000.

  2. Expand the SQL Server container.

  3. Click Security.

  4. Right-click Logins and, on the shortcut menu, click New Login.

  5. Enter or select the name of the Vault Service account. For example, domain\ev_service

  6. Check that Windows Authentication is selected and that the correct Domain for the account has been selected.

  7. Under Security Access check that Grant access is selected.

  8. On the Server Roles tab, select Database Creators.

  9. Click OK.

To create a SQL login account in SQL 2005

  1. Start SQL Server Management Studio.

  2. In the tree, select Security>Logins.

  3. Right-click Logins, and select New Login.

  4. Either type in the Vault Service account as domain\username or click Search and search for the account. In the search dialog box, ensure that the correct domain is entered in the Locations box.

  5. Select Windows authentication.

  6. In the tree, click Server roles.

  7. Select the check box beside dbcreator.

  8. Click OK.

  9. In the toolbar, click New Query.

  10. Enter the following script:

    use Master
GRANT VIEW SERVER STATE TO "domain\vsa_account"
GO

    where domain\vsa_account is the domain and name of the Vault Service account.

  11. Click Execute.

  12. You can check that the Vault Service account has the dbcreator role as follows:

    • In the tree, select Security>Server Roles.

    • In the right-hand pane, double-click the dbcreator role.

    • The Vault Service account should be displayed in the membership list.

  13. You can check that the Vault Service account has VIEW SERVER STATE permission as follows:

    • In the tree, right-click the top level SQL Server object and select Properties.

    • Select the Permissions page.

    • Under Logins or roles, select the Vault Service account and then click Effective Permissions. Check that VIEW SERVER STATE is included in the list of permissions.

To create a SQL login account in SQL 2008

  1. Start SQL Server Management Studio.

  2. In the tree, select Security>Logins.

  3. Right-click Logins, and select New Login.

  4. Either type in the Vault Service account as domain\username or click Search and search for the account. In the search dialog box, ensure that the correct domain is entered in the Locations box.

  5. Select Windows authentication.

  6. In the tree, click Server roles.

  7. Select the check box beside dbcreator.

  8. Click OK.

  9. In the toolbar, click New Query.

  10. Enter the following script:

    use Master
GRANT VIEW SERVER STATE TO "domain\vsa_account"
GO

    where domain\vsa_account is the domain and name of the Vault Service account.

  11. Click Execute.

  12. You can check that the Vault Service account has the dbcreator role as follows:

    • In the tree, select Security > Server Roles.

    • In the right-hand pane, double-click the dbcreator role.

    • The Vault Service account should be displayed in the membership list.

  13. You can check that the Vault Service account has VIEW SERVER STATE permission as follows:

    • In the tree, right-click the top level SQL Server object and select Properties.

    • Select the Permissions page.

    • Under Logins or roles, select the Vault Service account and then click Effective Permissions. Check that VIEW SERVER STATE is included in the list of permissions.