SQL login for Certero Provisioning

certero logo_cropped_png-01 1.png

To allow Certero Provisioning to manage your instances of the Certero Management Platform (CMP), the SQL login it will use needs permissions in order to create, upgrade, backup and restore instance databases.

Note that if Certero Provisioning must have full ownership of the databases it creates, which this will, but no access to any other databases that may be present on the target SQL Instance. Without the SQL login that Certero Provisioning with use having the right permissions, it can result in the failure of a Certero Provisioning operation, such as creating or upgrading an instance of the CMP.

How this is achieved depends on whether your SQL Server instance is on the same server as Certero Provisioning, or a remote server.

SQL Server on the same server as Certero Provisioning

The SQL login can be created using the following command that can be run as a single script:

CREATE LOGIN [BUILTIN\Administrators] FROM WINDOWS WITH DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english]
GO

ALTER SERVER ROLE [sysadmin] ADD MEMBER [BUILTIN\Administrators]
GO

CREATE LOGIN [NT AUTHORITY\NETWORK SERVICE] FROM WINDOWS WITH DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english]
GO

ALTER SERVER ROLE [sysadmin] ADD MEMBER [NT AUTHORITY\NETWORK SERVICE]
GO

SQL Server on a remote server

The SQL login can be created using the following SQL commands, replacing DOMAIN and SERVERNAME$ with your specific settings:

CREATE LOGIN [DOMAIN\SERVERNAME$]
FROM WINDOWS WITH DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english]
GO

ALTER SERVER ROLE [dbcreator] ADD MEMBER [DOMAIN\SERVERNAME$]
GO