Information Technology Reference
In-Depth Information
You must set the appropriate permissions for this SQL login by mapping the SQL login
to the dbo user on the databases created for vCenter Server. In SQL Server 2005/2008,
you do this by right-clicking the SQL login, selecting Properties, and then choosing User
Mapping.
◆
Not only must the SQL login have dbo privileges on the database created for vCenter
Server, it must also be set as the owner of the database. Figure 3.7 shows a new SQL data-
base being created with the owner set to the vCenter Server SQL login.
◆
Figure 3.7
h e SQL Server
2005/2008 data-
base that vCenter
Server uses must
be owned by the
account vCenter
Server uses to
connect to the
database.
Finally, the SQL login created for use by vCenter Server must also have dbo privileges on
the MSDB database but only for the duration of the installation process. This permission
can and should be removed after installation is complete to aid in maintaining integrity
within the SQL database infrastructure and to adhere to the principle of least privilege
security best practices.
◆
If you have an existing SQL Server 2005/2008 database that needs to be used as the backend
for vCenter Server, you can use the sp_changedbowner stored procedure command to change
the database ownership accordingly. For example, the following command would change the
database owner to an SQL login named vcdbuser:
EXEC sp_changedbowner @loginame='vcdbuser', @map='true'
You need to take these steps prior to creating the ODBC DSN to the SQL Server database.
