HPFOCUS

Mohammed 写了：During a sim installation with a remote sql server 2008 r2, its getting stuck at initializing database for more than an hour now.

Could that possibly be because of the rights given to the user on the database?

Can someone share the required database rights for SIM to work fine on a remote sql server.

Please note that the environment wont allow to have sysadmin right assignment.

Sandeep 写了：SIM requires sysadmin privilege for installation. However post installation we can remove sysadmin privilege.

Please follow the steps below to minimize privileges post installation.

Configuration HPSIM to run with minimum privileges post installation

NOTE 1:
Ensure at least one user with SYSADMIN server role is present in SQL server. Otherwise you will not be able to connect back to SQL server. In case you have only one user with SYSADMIN (say admin) in SQL server then you must create another user (example myuser) with SYSADMIN before altering the current user (admin).

NOTE 2:
If “BUILTIN\Administrators” is added by default as Login user in our SQL server then you have to remove it. As all the users under this group will have SYSADMIN privilege by default.


Using SQL Server Management Studio

To remove “sysadmin” server role and enable “db_datareader” and “db_datawriter” database role
1. In Object Explorer, expand the server where you want to remove server role.
2. Expand the Security folder.
3. Expand the Logins folder.
4. Right-click on user (say administrator) you want to remove sysadmin server role and select Properties.
5. In Select a page Explorer, select the Server Roles and uncheck sysadmin Server Role.

1.png

6. In Select a page Explorer, select User Mapping
7. Select the database (say Insight_SIM71) in map column and in “database role membership” text box select db_datareader and db_datawriter

2.png

Using Transact-SQL

To remove “sysadmin” server role and enable “db_datareader” and “db_datawriter” database role
1. To remove SYSADMIN server role for a user (say 'SIM26\administrator') execute below Transact-SQL,

代码： 全选

EXEC sp_dropsrvrolemember 'SIM26\administrator', 'sysadmin'

2. To enable db_datareader and db_datawriter database role for a user (say 'SIM26\administrator') execute below Transact-SQL

代码： 全选

exec sp_addrolemember db_datareader, 'SIM26\administrator' 
exec sp_addrolemember db_datawriter , 'SIM26\administrator'