Enterprise Vault™ Using SQL Database Roles in Enterprise Vault, Compliance Accelerator, and Discovery Accelerator

Last Published:
Product(s): Enterprise Vault (14.1, 14.0, 12.5, 12.4, 12.3, 12.2, 12.1, 12.0)
  1. About this guide
    1.  
      Introducing this guide
  2. Using Enterprise Vault database roles
    1.  
      About Enterprise Vault database roles
    2. Configuring the Vault Service account for normal operations
      1.  
        Preparing to configure the Vault Service account
      2.  
        Configuring the Vault Service account's SQL login
      3.  
        Changing ownership of Enterprise Vault databases
      4.  
        Assigning the Vault Service account to EVRuntimeRole
      5.  
        Mapping the Vault Service account to the msdb system database
      6.  
        Creating EVMonitoringOperator in the msdb system database and assigning Vault Service account
      7.  
        Restarting Enterprise Vault services
    3.  
      Configuring the Vault Service account for operations that require elevated privileges
  3. Using Compliance Accelerator and Discovery Accelerator roles
    1.  
      About Compliance Accelerator and Discovery Accelerator database roles
    2. Configuring the Vault Service account for normal operations
      1.  
        Preparing to configure the Vault Service account
      2.  
        Configuring the Vault Service account's SQL login
      3.  
        Changing ownership of Compliance Accelerator and Discovery Accelerator databases
      4.  
        Assigning the Vault Service account to EVRuntimeRole
      5.  
        Mapping the Vault Service account to the msdb system database
      6.  
        Creating EVScheduledSearchOperator in the msdb system database and assigning the Vault Service account
      7.  
        Creating EVAnalyticsOperator in the msdb system database and assigning the Vault Service account
      8.  
        Restarting Compliance Accelerator and Discovery Accelerator services
    3.  
      Configuring the Vault Service account for operations that require elevated privileges

Configuring the Vault Service account for operations that require elevated privileges

In addition to the SQL privileges that the Vault Service account requires for normal daily operations, you can assign temporary, elevated privileges for other operations such as Compliance Accelerator and Discovery Accelerator upgrades.

Table: Compliance Accelerator and Discovery Accelerator database roles lists the Compliance Accelerator and Discovery Accelerator database roles and describes the operations for which each is required. For example, for an Compliance Accelerator and Discovery Accelerator upgrade, use the following procedure to assign the Vault Service account to the EVUpgradeRole.

To assign the Vault Service account to EVUpgradeRole

  1. Stop all Compliance Accelerator and Discovery Accelerator services.
  2. Connect to the SQL server using SQL Server Management Studio.
  3. In Object Explorer, under Security > Logins, double-click the Vault Service account.
  4. In the Login Properties dialog box, select the Server Roles page.
  5. Check that only the public option is selected.
  6. Select the User Mapping page.
  7. For each Compliance Accelerator and Discovery Accelerator database, do the following:

    • Under Users mapped to this login, select the Map option.

    • Under Database role membership for, select the EVUpgradeRole option.

  8. Click OK to save the changes.
  9. Restart all Compliance Accelerator and Discovery Accelerator services.

In this example, the Vault Service account must be assigned to EVUpgradeRole for the duration of the upgrade.

When the upgrade is complete, use the same procedure to revoke the assignment, by clearing the EVUpgradeRole option in step Step 7.