What is the reason NetIQ requires a System Administrators Server Role for access to the AppManager Repository? (NETIQKB4692)

  • 7704692
  • 02-Feb-2007
  • 08-Mar-2011

Environment

NetIQ AppManager 6.x
NetIQ AppManager 7.0.x

Situation

What is the reason NetIQ requires a System Administrators Server Role for access to the AppManager Repository?

Resolution

Reasons the NetIQ Login Requires DBO User (System Administrator Privileges):

  1. This login is used to create the AppManager Repository (QDB) and all the database objects that are used by NetIQ AppManager(including the extended procedures).
  2. This login is used to create and run the SQL tasks like NetIQ Minutely QDB, NetIQ Daily QDB, et cetera, which in turn run DBCC checks on the database.
  3. This login also is used to create new logins and users in SQL and assign permissions to them for read, executing different db objects in QDB ( that you specify in Security Manager).

To perform these actions you need to have a dbo login that is by default created as 'NetIQ' or the Windows NT user that runs the install and run netiqms service. The user can always change this with a user who has the enough privileges to perform the above.

Additional Information

Formerly known as NETIQKB4692

This is true only for a mixed mode environment. If the SQL run on Windows NT mode then this holds good for the user who runs QDB installation and runs the AppManager Management Server (netiqms) service.