Source SQL Server Database User Tasks

You must configure two database users for each SQL Instance being used as a source environment in the Delphix Engine:

  • A Windows Authentication user (e.g. DOMAIN\delphix_src), corresponding to the Source Windows Login configured by your System Administrator (see Windows Users and Permissions on Database Servers)
  • A SQL Login user (for example, delphix_db), which can be accessed using SQL Authentication over Java database connectivity (JDBC) to the database

The queries that these users perform do not modify data. Rather, they  gather information such as database names, database sizes, recovery mode, and backup information. In some cases, the SQL Login may also be used to initiate copy-only database backups.

 The following table summarizes the permissions that you must grant to these two users:

ObjectPrivileges Required

Delphix DB User- delphix_db
(SQL Login) 

Delphix OS User - delphix_src
(Windows Login)
How to grant
(using SQL Server Management Studio) 
Purpose
ServerCONNECT SQL(tick)(tick)

Granted by default when creating a login

  1. Security > Logins.
  2. Right-click and select New Login...
Access to the SQL Server instance
Database: masterdb_datareader(tick)(tick)
  1. Security  >  Logins  >  (user)  >  User  Mappings
  2. Click the checkbox next to  master.
  3. Select  master  and check the  db_datareader checkbox.
Access to information about attached databases
Database: msdbdb_datareader(tick)
  1. Security  >  Logins  >  (user)  >  User  Mappings.
  2. Click the checkbox next to  msdb.
  3. Select  msdb  and check the  db_datareader  checkbox.
Access to backup history

Each user database to be linked

PUBLIC(tick)
  1. Security  >  Logins  >  (user)  >  User  Mappings.
  2. Click the checkbox next to the database to be linked.
Monitoring of database size
Each user database to be linkeddb_backupoperator(tick)
  1. Security  >  Logins  (user)  User  Mappings.
  2. Click the checkbox next to the database to be linked.
  3. Select the database.
  4. Check the  db_backupoperator  checkbox.
Optional: Required for backups to be initiated by Delphix 
(using Delphix Managed Backups, or when opting to take a
backup when performing a manual Snapshot)
Additional privileges required for discovering AlwaysOn Availability Groups
ServerVIEW ANY DEFINITION(tick)(tick)
  1. Security > Logins > (user) > Securables.
  2. Select the object with type Server.
  3. Next to the VIEW ANY DEFINITION privilege, check  Grant.
Access to information on the configuration of Availability Groups
ServerVIEW SERVER STATE(tick)(tick)
  1. Security > Logins > (user) > Securables.
  2. Select the object with type Server.
  3. Next to the VIEW SERVER STATE privilege, check Grant.
Access to information on configured Availability Group listeners

Target SQL Server Database User Tasks

You must configure one Windows Authentication database user (for example,  DOMAIN\delphix_tgt) on each target instance, corresponding to the Target Windows Login configured by your System Administrator (see Windows Users and Permissions on Database Servers).

This database user needs the following privileges:

ObjectPrivileges RequiredDelphix OS User - delphix_tgt
(Windows Login)
How to grant
(using SQL Server Management Studio) 
Purpose
ServerCONNECT SQL(tick)

Granted by default when creating a login

  1. Security > Logins.
  2. Right-click and select New Login...
Access to the SQL Server instance
Serversysadmin(tick)
  1. Security  >  Logins  >  (user)  >  Server Roles
  2. Click the checkbox next to  sysadmin .

Create, drop, and modify databases and their metadata to support VDB provisioning

Staging Target SQL Server Database User Tasks

One "Windows Authentication" database user (e.g. DOMAIN\delphix_tgt) must be configured on each Staging Instance, corresponding to the Staging Windows Login configured by your System Administrator (see Windows Users and Permissions on Database Servers).

This database user needs to be granted the following privileges: 

ObjectPrivileges RequiredDelphix OS User
(Windows Login)
How to grant
(using SQL Server Management Studio) 
Purpose
ServerCONNECT SQL(tick)

Granted by default when creating a login

  1. Security > Logins.
  2. Right-click and select New Login...
Access to the SQL Server instance
Serversysadmin(tick)
  1. Security  >  Logins  >  (user)  >  Server Roles.
  2. Click the checkbox next to sysadmin.

Create, drop, and modify databases and their metadata to support Validated Sync operations

 

Related Links