Some Endpoint Protection Manager functions fail without SQL DBO rights

Products

• Endpoint Protection

Issue/Introduction

You need to know the ramifications for removing the database owner (DBO) rights from the Symantec Endpoint Protection Manager (SEPM) SQL account.

Resolution

The SEPM SQL account requires DBO rights to the SEPM database during installation and upgrades in order to configure the database.

Post-installation, the DBO rights are required for Database maintenance tasks.  If the role is revoked, these tasks will fail.