Enterprise Vault™ Using SQL Database Roles in Enterprise Vault, Compliance Accelerator, and Discovery Accelerator

Last Published:
Product(s): Enterprise Vault (14.1, 14.0, 12.5, 12.4, 12.3, 12.2, 12.1, 12.0)
  1. About this guide
    1.  
      Introducing this guide
  2. Using Enterprise Vault database roles
    1.  
      About Enterprise Vault database roles
    2. Configuring the Vault Service account for normal operations
      1.  
        Preparing to configure the Vault Service account
      2.  
        Configuring the Vault Service account's SQL login
      3.  
        Changing ownership of Enterprise Vault databases
      4.  
        Assigning the Vault Service account to EVRuntimeRole
      5.  
        Mapping the Vault Service account to the msdb system database
      6.  
        Creating EVMonitoringOperator in the msdb system database and assigning Vault Service account
      7.  
        Restarting Enterprise Vault services
    3.  
      Configuring the Vault Service account for operations that require elevated privileges
  3. Using Compliance Accelerator and Discovery Accelerator roles
    1.  
      About Compliance Accelerator and Discovery Accelerator database roles
    2. Configuring the Vault Service account for normal operations
      1.  
        Preparing to configure the Vault Service account
      2.  
        Configuring the Vault Service account's SQL login
      3.  
        Changing ownership of Compliance Accelerator and Discovery Accelerator databases
      4.  
        Assigning the Vault Service account to EVRuntimeRole
      5.  
        Mapping the Vault Service account to the msdb system database
      6.  
        Creating EVScheduledSearchOperator in the msdb system database and assigning the Vault Service account
      7.  
        Creating EVAnalyticsOperator in the msdb system database and assigning the Vault Service account
      8.  
        Restarting Compliance Accelerator and Discovery Accelerator services
    3.  
      Configuring the Vault Service account for operations that require elevated privileges

Introducing this guide

Enterprise Vault, Compliance Accelerator and Discovery Accelerator use database roles that you can use to improve SQL database security.

This document describes how to revoke the SQL database permissions that the Vault Service account does not need, and how to use the database roles to grant only the permissions needed for normal daily operations, and additional permissions when they are required.

The installation and configuration of Enterprise Vault, Compliance Accelerator, or Discovery Accelerator must be complete before you use the procedures in this document.

This document applies to Enterprise Vault 12 and later. For earlier versions of Enterprise Vault, click the following links: