dcsimg

SQL permissions required for the Webtrends service account during installation and afterwards

Products

Webtrends Analytics 8.x
Webtrends Analytics 9.x

Cause

The Webtrends service account requires restrictions be relaxed during installation of the product, after which restrictions may be reapplied to ensure the server is secure.




Resolution

During the installation:

8.7d and 9.x require that the domain user account have the following SQL permissions for installation, modifications to the installation (add/remove components) and upgrades:

Server Roles:

securityadmin

dbcreator

Database Permissions:

db_owner or db_ddladmin

db_datareader

db_datawriter

The reason for these requirements, relative to installation, is because Webtrends uses these permissions to create database objects upon installation, and if unable to do so the installation will fail.

After installation:

For general day-to-day operations after installation the above permissions can be changed to the following for the service account.

Server Roles:

public

Database permissions:

db_datareader

db_datawriter

exec sproc

During installation, Webtrends creates a new role called “wt_servicerole”. This role only shows up for the two databases used, wt_sched and wtMaster and contains the “exec sproc” permission. The user must be granted this role to have the exec sproc permission.

More Information

Assigning local security policies for the Webtrends service account