Client Management Suite

We just set up a new instance of Symantec Client Management Suite.

We are using a shared SQL database, I had the DB admin create the user account as a sysadmin to make sure all worked.

They now want to dial back those permissions.

Is there a minimum permisssions level required for this user?

 

Thanks

I can't find anything in the current documentation but from memory it always needed to be the Owner of the database and have the 'dbo' role.

To expand on what Andy says above, the service account requires to be granted the db_owner role for the Symantec CMDB database (and any other databases created by your Altiris installation).

This role has will have full access to any database you grant these permissions to. This will then allow you to dial those permissions back from the sysadmin over the whole SQL Server.

I seem to remember that it's recommended that the Service Account ("Application Identity") should be the Owner of the database in addition to having the db_owner/dbo role.