PowerProtect Data Manager Appliance 5.15.0.0 Microsoft SQL Server User Guide

Required Microsoft SQL Server roles

Assign the user the following Microsoft SQL Server roles:

• sysadmin
• public

Required Windows user permissions

Create a local or domain Windows user account and assign the following roles:

• The built-in Windows Administrator.
• A domain user added to the local Administrators user group.

• For a stand-alone server only:

  • For table-level backup and recovery, assign the administrative privileges.
  • For database-level backup and recovery, assign the following permissions:
    • Add the user to the "Create global objects" Windows policy.
    • For all Microsoft SQL Server instances on the host that will be protected, assign the following permissions to the data and log folder of the database:
      • Read
      • Write
      • List folder contents

      Assign the permissions for all paths where databases are stored, including the default data and log folder of the Microsoft SQL Server installation. The default data and log folder may be under the Microsoft SQL Server installation folder. For example, for Microsoft SQL Server 2012, the default folder is C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\.

• For an Always On availability group only:

  • A local user account added to the Administrators user group on each node in the cluster. The username and password must be the same on each node.
  NOTE: For an Always On availability group, Failover Cluster Instance, or Always On Failover Cluster Instance, if you use an account that you created (an account that is not the built-in Windows Administrator), you must launch the tool where you perform the backup or recovery with elevated permissions (run as administrator).

Setting the sysadmin privilege for the Microsoft SQL Server host

To enable the integration with PowerProtect Data Manager Appliance on the Microsoft SQL Server host, the database OS account or NT AUTHORITY\SYSTEM account on the host requires the sysadmin privilege. Setting the sysadmin privilege for Microsoft SQL Server hosts provides more information.

Required privileges for T-SQL backups

To enable the Application Direct backups using Transact-SQL (T-SQL) scripts with the Microsoft application agent, specific access permissions are required. The SQL Agent Service login user must have read and write access permissions in the Microsoft application agent installation directory, which is C:\Program Files\DPSAPPS\MSAPPAGENT by default.