PowerProtect Data Manager 19.9 Microsoft Application Agent SQL Server User Guide

Required SQL Server roles

Assign the user the following SQL Server roles:

• sysadmin
• public

Required Windows user permissions

Create a local or domain Windows user account and assign the following roles:

• The built-in Windows Administrator.
• A domain user added to the local Administrators user group.

• For a stand-alone server only:

  • For table-level backup and recovery, assign the administrative privileges.
  • For database-level backup and recovery, assign the following permissions:
    • Add the user to the "Create global objects" Windows policy.
    • For all SQL instances on the host that will be protected, assign the following permissions to the data and log folder of the database:
      • Read
      • Write
      • List folder contents

      Assign the permissions for all paths where databases are stored, including the default data and log folder of the SQL Server installation. The default data and log folder may be under the SQL Server installation folder. For example, for SQL Server 2012, the default folder is C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\.

• For an Always On availability group only:

  • A local user account added to the Administrators user group on each node in the cluster. The username and password must be the same on each node.
  NOTE For an Always On availability group, Failover Cluster Instance, or Always On Failover Cluster Instance, if you use an account that you created (an account that is not the built-in Windows Administrator), you must launch the tool where you perform the backup or recovery with elevated permissions (run as administrator).

Setting the sysadmin privilege for the SQL Server host

To enable the integration with PowerProtect Data Manager Data Manager on the SQL Server host, the NT AUTHORITY\SYSTEM account on the host requires the sysadmin privilege. Setting the sysadmin privilege for Microsoft SQL hosts provides more information.