Permissions Required for SQL Server Users for EShare

This section explains how to create users in SQL Server Database, assign roles, and grant permissions to them depending upon whether they must be allowed to create and update the Innowera EShare database using the Innowera EShare Database & Service Configuration tool.

• Advanced users are users with db_creator server-level role assigned to them. In this section, advanceduser is an example of such a user. If the Innowera EShare database is already created, then a user with db_owner database-level role will suffice.
• Basic users are users with only the db_datareader and db_datawriter roles assigned to them in addition to EXECUTE permission. Such users can perform only insert, update, delete, and select operations from the Innowera EShare web application. In this section, basicuser is an example of such a user.

To create a user and grant permissions,

1. Connect to the appropriate SQL Server using SQL Server Management Studio.
2. In the Object Explorer, expand Databases.
3. Right-click Logins, and select New Login.
4. Provide the login name in the Login name box. You can select Windows authentication or SQL Server authentication. For example, enter advanceduser as the login name to create the advanceduser user.
5. For the advanceduser perform the following steps:
   1. In the Object Explorer, expand Security > Logins.
   2. Right-click advanceduser, and select Properties. The Login Properties-advanceduser window is displayed.
   3. Select Server Roles in the left pane and in Server Roles section, select db_creator. The required role is assigned to the advanceduser.
6. Repeat steps 1 to 3 to create the basicuser, and perform the following steps:
   1. In the Object Explorer, expand Security > Logins.
   2. Right-click basicsuser, and select Properties. The Login Properties-basicuser window is displayed.
   3. Select User Mapping, and select the database that was created using the Innowera EShare Database & Service Configuration tool from the list of databases that are displayed in Users mapped to this login section. For example, if INW_PRDB is the name of the database that was created using the tool, select INW_PRDB database in the section.
   4. In the Database role membership for: INW_PRDB section, select db datareader and db datawriter.
   5. In the Object Explorer, expand Databases.
   6. Right-click INW_PRDB, and select Properties. The Database Properties-INW_PRDB window is displayed.
   7. Select Permissions in the pane on the left side and in Permissions for basicuser section, select Execute and Alter. The required roles and permissions are assigned to the basicuser.

Important: After the advanceduser creates the Innowera EShare database using the Database & Service Configuration tool, we recommend that the basicuser use the tool to perform other operations, if required.