SQL Server Metadata Repository User Permissions

Modified on Wed, 10 Feb 2021 at 11:33 PM

SQL Server Login Setup

Create an SQL Server login that will be used to set up the RED metadata repository and for access by the RED scheduler service. The minimum SQL Server permissions are as follows:

Permissions to kill a process when killing jobs in the scheduler

VIEW SERVER STATE
ALTER ANY CONNECTION

SQL Server 2012 roles

For SQL Server 2012 and later only, users can create server roles and grant them to the RED scheduler and RED users.

Database Permissions

Database roles (on the database with the RED metadata in it)

db_datareader
db_datawriter
db_ddladmin

Database grants (on the database with the RED metadata in it)

SELECT
INSERT
UPDATE
DELETE
EXECUTE

Note
When creating a new repository or validating the metadata in an existing repository, the SQL Server login used must have SYSADMIN or the ALTER TRACE permission. This is because almost all the WhereScape procedures have a catch all with log file option exception handler. This ensures that if the scheduler cannot log errors to the database, it can log errors to SQL Server logs and Application logs.

The SQL Server login for RED must have a default schema of dbo.