Permissions Required for SQL Server Users
This section explains how to create users in SQL Server Database, assign roles, and grant permissions to them depending upon whether they must be allowed to create and update the Innowera Control Panel database using the Innowera Control Panel Database Setup tool.
- Advanced users are users with db_creator server-level role assigned to them. In this section, advanceduser is an example of such a user. If the Innowera Control Panel database is already created, then a user with db_owner database-level role will suffice.
- Basic users are users with only the db_datareader and db_datawriter roles assigned to them in addition to EXECUTE permission. Such users can perform only insert, update, delete, and select operations from the Innowera Control Panel web application. In this section, basicuser is an example of such a user.
To create a user and grant permissions,
- Connect to the appropriate SQL Server using SQL Server Management Studio.
- Right-click Logins, and select New Login.
- Provide the login name in the Login name box. You can select Windows authentication or SQL Server authentication. If you select SQL Server authentication, you must also provide a strong password in both the Password and Confirm password text boxes. For example, enter advanceduseras the login name. The advanceduser is created.
- For the advanceduser perform the following steps:
- In the Object Explorer, expand Security > Logins.
- Right-click advanceduser, and select Properties. The Login Properties-advanceduser window appears.
- Select Server Roles in the left pane and in Server Roles section, select db_creator.
The required role is assigned to the advanceduser.
- Repeat steps 1 to 3 to create the basicuser, and perform the following steps:
- In the Object Explorer, expand Security > Logins.
- Right-click basicsuser, and select Properties. The Login Properties-basicuser window appears.
- Select User Mapping in the left pane, and select the database that was created using the Innowera Control Panel Database Setup tool from the list of databases that are displayed in Users mapped to this login section. For example, if INW_iCtrlPanel is the name of the database that was created using the tool, select INW_iCtrlPanel database in the section.
- In the Database role membership for: INW_iCtrlPanel section, select db datareader and db datawriter.
- In the Object Explorer, expand Databases.
- Right-click INW_iCtrlPanel, and select Properties. The Database Properties-INW_iCtrlPanel window appears.
- Select Permissions in the left pane and in Permissions for basicuser section, select Execute.
The required roles and permissions are assigned to the basicuser.
Important: After the advanceduser creates the Innowera Control Panel database using the Innowera Control Panel Database Setup tool, we recommend that the basicuser use the tool to perform other operations, if required.