Enterprise Vault™ Housekeeping for the Monitoring Database

Last Published:
Product(s): Enterprise Vault (14.1, 14.0, 12.5, 12.4, 12.3, 12.2, 12.1, 12.0, 11.0.1, 11.0)

Assigning the roles and permissions to the Vault Service account

Unless you assign the SQL system administrator (sysadmin) role to the Vault Service account, you must perform a number of steps to configure the Vault Service account.

In brief, you must do as follows:

  • Add the Vault Service account as an msdb system database user.

  • Grant the Vault Service account Select permissions on the msdb tables sysjobs, sysjobschedules, sysjobservers, and sysjobsteps.

  • Microsoft SQL Server 2012 or later: assign the database role SQLAgentUserRole to the Vault Service account.

To assign roles and permissions to the Vault Service account

  1. On the SQL Server computer, start SQL Server Management Studio.
  2. Select the required SQL Server.
  3. Browse to Databases > System Databases > msdb > Security > Users.
  4. Right-click Users, and then click New User.
  5. In the User name box, enter a new user name
  6. In the Login name box, enter the domain and the user name of the Vault Service account, in the form domain\user_name.
  7. Click OK.
  8. Right-click the new user that you have just created, and then click Properties.

  9. Add the following msdb tables to the list of securables, and then grant Select permission for them to the Vault Service account:

    • sysjobs

    • sysjobschedules

    • sysjobservers

    • sysjobsteps

  10. Browse to Databases > System Databases > msdb > Security > Roles > Database Roles.
  11. Right-click SQLAgentUserRole, and then click Properties.
  12. On the General page, click Add, and then select the Vault Service account that you have just created.