App Control: How Do We Assign the Required Permissions to Our App Control Server Service Account in SQL?
search cancel

App Control: How Do We Assign the Required Permissions to Our App Control Server Service Account in SQL?

book

Article ID: 286749

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To assign the required permissions to the App Control Server service account in SQL.

Environment

  • App Control┬áServer: All Versions
  • Microsoft SQL Server: All Supported Versions

Resolution

Assign the Relevant Roles: (Required for installation or upgrades)
  1. Launch SQL Server Management Studio and connect to the SQL Server.
  2. Expand the Security folder > Logins
  3. Right click the App Control Service Account > Properties > Server Roles
  4. Check sysadmin and click OK.

Assign the Relevant Securables: (Required at all times)
  1. Launch SQL Server Management Studio and connect to the SQL Server.
  2. Click New Query and run the following scripts:
    use das;
    GRANT ALTER TRACE TO "App Control Service Account"
    GRANT VIEW ANY DEFINITION TO "App Control Service Account"
    GRANT VIEW SERVER STATE TO "App Control Service Account"
    GRANT ALTER SERVER STATE TO "App Control Service Account"

Additional Information

  • DB_OWNER permissions on das is automatically assigned to the Service Account during database creation, and should never be removed.
  • There should be an active SA account in SQL or the install may fail with "a critical database script".