Microsoft SQL Server Required Privileges

The Laserfiche Server service requires certain minimum privileges to create a repository: the user must be allowed to log in to SQL Server and create a database.

First, you will need to create or specify a Windows user account that the Laserfiche server service will log in as. (Alternately, you can enable SQL Server Login, and create a user in SQL Server.) The user must be able to log in to the SQL Server and create databases, but does not need to be a domain administrator. You can grant the user the ability to create databases in one of two ways: by granting the dbcreator fixed server role or by adding the user to the Local Administrators group on the server computer. While adding the user to Local Administrators is simple, it may not be desirable if you want to minimize the number of users with administrator privileges.

If you do not want to add the server service user to any fixed server roles, you can create the database manually and grant the user account full access to the database by making that user the database owner. You will then also need to grant the user the View Any Definition privilege on the master database. (This can be done by running GRANT VIEW ANY DEFINITION TO ServerLoginUser, where ServerLoginUser is the user the server service logs in as.) This will grant the server service user access to the Laserfiche database without granting the ability to create other databases.