Management Server Configuration Wizard fails to complete due to missing SQL permissions

Products

• Endpoint Protection

Issue/Introduction

Running the Management Server Configuration Wizard (MSCW) on Symantec Endpoint Protection Manager (SEPM) 14.x fails to complete. The error indicates missing SQL permissions for the user specified.

ConfigurationWizard-*.log:
2019-01-22 14:08:11.318 THREAD 25 WARNING: DatabaseUtilities> hasUserAlterAnyLoginPermission>> Account permission verification started... dbAccountName: sem5
2019-01-22 14:08:11.334 THREAD 25 INFO: DatabaseUtilities> hasUserAlterAnyLoginPermission>> Getting the permission
2019-01-22 14:08:11.334 THREAD 25 INFO: DatabaseUtilities> hasUserAlterAnyLoginPermission>> Account: sem5 has the permission: CONNECT SQL
2019-01-22 14:08:11.334 THREAD 25 INFO: DatabaseUtilities> hasUserAlterAnyLoginPermission>> Account: sem5 has the permission: VIEW ANY DATABASE
2019-01-22 14:08:11.334 THREAD 25 WARNING: DatabaseUtilities> hasUserAlterAnyLoginPermission>> Account permission verification done! hasRequiredPermission: false
2019-01-22 14:08:47.549 THREAD 26 SEVERE: exception retrieving connection

Cause

The MSCW will check for the ALTER ANY LOGIN privilege on the provided login. It is used to handle creation or modification of the 'REPORTER_sem5sem5' account. This privilege is only required during reconfiguration, or upon the first upgrade to SEP 14.x.

Resolution

Temporarily grant the ALTER ANY LOGIN privilege for the 'sem5', or your preferred database user, account with which the SEPM will operate. It may be removed once the process has completed successfully.