Note: Requires 14.5R5, or higher.
By default, the Connexion installer will perform the following database operations that require sysadmin access to the database server:
...
- Manually create the configuration database. The database name must start with 'CXN_' (default is CXN_Connexion):
| Info | ||
|---|---|---|
| ||
Note that by default, Connexion uses the SIMPLE recovery model. You may wish to modify your databases to use SIMPLE instead of FULL as point-in-time recovery is typically not required. |
- Manually create the message database.
...
- Create / edit your service user. This is the user you will use to run the Configuration service. This user should have reader/writer permissions on the two databases you've created.
Run Now run the Configuration Wizard (under the Install user's account). On the database connections tab, ensure that the 'Install User' account matches the install user account you setup in the database. Ensure that the 'Don't Create...' checkbox is checked.
Info title Windows Authentication If you are using Windows Authentication, the ConfigurationWizard must be run from the Windows Domain Account that has db_owner permissions on the database. Alternatively, you can use the runas command to impersonate this user. Run the following from a Windows command prompt:
runas /user:MyUser ConfigurationWizard.exe
...
wizard using an account that has Local administrator rights (in order to manage local folders, services, certificates, etc.)
You may need to use the 'runas' functionality from a command line in order to impersonate a user which has these required privileges:
| Code Block | ||||
|---|---|---|---|---|
| ||||
runas /user:MyUserWithAdminPriv ConfigurationWizard.exe |
If the user currently running the Configuration wizard has DBO access to the Connexion database(s) you have created, then you can use the "Current User" option in the 'Database Connexions' tab:
If your current user does not have DBO access to the Connexion database(s), you can provide the credentials of a Windows/Domain account which does. Please note that this account must be valid on the current machine (meaning that if it's a Windows user, this user must exist locally. If you provide a domain user, the current machine must be joined to the domain).
You can alternately provide SQL Server credentials via the 'SQL Server Authentication' option.
Once the configuration wizard has successfully run, YOU MUST GRANT STORED PROCEDURE EXECUTE PERMISSIONS TO THE SERVICE USER MANUALLY. The following statement will do this:
| Code Block | ||||
|---|---|---|---|---|
| ||||
Use [CXN_Connexion] <-- enter the name of the config database you created
GRANT EXECUTE TO [NICKWORK-PC\__cxne_user__] <-- enter the name of the Connexion service account
Use [CXN_Connexion_Default] <-- enter the name of the message database you created
GRANT EXECUTE TO [NICKWORK-PC\__cxne_user__] <-- enter the name of the Connexion service account
|
| Info | ||
|---|---|---|
| ||
Please also note that the backup and maintenance routines require higher permissions. It is expected that you will be taking over these operations and disabling them within Connexion by unchecking the backup / maintenance routines in the 'Server Connections' screen (second icon from top-left). |