Note: Requires 14.5R5, or higher.
By default, the Connexion installer will perform the following database operations that require sysadmin access to the database server:
...
- Manually create the configuration database. The database name must start with 'CXN_' (default is CXN_Connexion):
Info | ||
---|---|---|
| ||
Note that by default, Connexion uses the SIMPLE recovery model. You may wish to modify your databases to use SIMPLE instead of FULL as point-in-time recovery is typically not required. |
- Manually create the message database.
...
Now run the Configuration wizard using an account that has (at minimum):
DBO permissions on the database (in order to create tables, edit schemas etc.)
Local administrator rights (in order to manage local folders, services, certificates, etc.)
You may need to use the 'runas' functionality from a command line in order to impersonate a user which has these required privileges:
Code Block | ||||
---|---|---|---|---|
| ||||
runas /user:MyUserMyUserWithAdminPriv ConfigurationWizard.exe |
If the user currently running the Configuration wizard has DBO access to the Connexion database(s) you have created, then you can use the "Current User" option in the 'Database Connexions' tab:
Please ensure that on the connections tab of the configuration wizard you have checked the 'Skip Sql Server sysadmin operations...'
...
If your current user does not have DBO access to the Connexion database(s), you can provide the credentials of a Windows/Domain account which does. Please note that this account must be valid on the current machine (meaning that if it's a Windows user, this user must exist locally. If you provide a domain user, the current machine must be joined to the domain).
You can alternately provide SQL Server credentials via the 'SQL Server Authentication' option.
Once the configuration wizard has successfully run, YOU MUST GRANT STORED PROCEDURE EXECUTE PERMISSIONS TO THE SERVICE USER MANUALLY. The following statement will do this:
Code Block | ||||
---|---|---|---|---|
| ||||
Use [CXN_Connexion] <-- enter the name of the config database you created
GRANT EXECUTE TO [NICKWORK-PC\__cxne_user__] <-- enter the name of the Connexion service account
Use [CXN_Connexion_Default] <-- enter the name of the message database you created
GRANT EXECUTE TO [NICKWORK-PC\__cxne_user__] <-- enter the name of the Connexion service account
|
Info | ||
---|---|---|
| ||
Please also note that the backup and maintenance routines require higher permissions. It is expected that you will be taking over these operations and disabling them within Connexion by unchecking the backup / maintenance routines in the 'Server Connections' screen (second icon from top-left). |