Installation and deployment Questions on installation, system configuration and deployment to the live server.
Version 6.x > Installation and deployment > Connection String - User Account priviliges View modes: 
User avatar
Member
Member
nra-ns - 3/21/2012 2:11:24 PM
   
Connection String - User Account priviliges
What priviliges are required by the user account that is used in the connection string for any Kentico website? I would like to give the least amount of priviliges

User avatar
Kentico Developer
Kentico Developer
kentico_ivanat - 3/22/2012 3:05:11 AM
   
RE:Connection String - User Account priviliges
Hi,

the list of required permissions you can find here:
list of required permissions
Then you need to grant a user with an access to the folder where data are stored.

In general, you can simply create a new user and assign in to the correct group (for example IIS_IUSRS in Win 7).

Best regards,
Ivana Tomanickova

User avatar
Member
Member
nra-ns - 3/22/2012 11:26:46 AM
   
RE:Connection String - User Account priviliges
Thank you for your response. I should clarify that I was referring to the sql login account that is used in the ConnectionString. Currently, we are using the same account that was initially used during installation. It is set up as sysadmin.

User avatar
Kentico Developer
Kentico Developer
kentico_ivanat - 3/26/2012 2:41:42 AM
   
RE:Connection String - User Account priviliges
Hi,

you can find some recommendation for example here:
Running SQL agent.

You can also take a look at Security consideration for a SQL Server Installation.

Best regards,
Ivana Tomanickova

User avatar
Member
Member
nra-ns - 3/27/2012 10:00:42 AM
   
RE:Connection String - User Account priviliges
I am not looking for general Microsoft recommendations. I am looking for specific Kentico requirements. Unless the sql login account runs with dbo privileges, the site does not work. It redirects me to the cmsinstall page if I decrease the rights. There needs to be no documentation on this anywhere.

User avatar
Member
Member
nra-ns - 3/27/2012 10:02:16 AM
   
RE:Connection String - User Account priviliges
i meant there seems to be no documentation on this anywhere.

User avatar
Kentico Developer
Kentico Developer
kentico_ivanat - 3/28/2012 7:53:23 AM
   
RE:Connection String - User Account priviliges
Hi,

the database user in Kentico does not need any special permissions.

You said that site is running only under dbo schema. In case you really mean the schema, there was a bug in a default 6.0 installation and database could not be installed for different schema than "dbo". It was fixed in the hotfix number 3.

There is also a setting for the schema - DB object schema.

http://<your_kentico_site>/CMSHelp/index.html?settings_system.htm

Best regards,
Ivana Tomanickova