nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Should the ArcGIS Server Account be in the sysadmin SQL Server Role?

CortWilson

ArcGIS Server 10.2.2

SQL Server 2008 R2

DBO owned schema

I noticed that our ArcGIS Server account is in the sysadmin server role in our SQL Server 2008. Does ArcGIS Server place the server account in that role by default? Seems like too high level of permissions for the server account....

I think a problem I am having is stemming from this. When I block connections to the database from ArcCatalog, the ArcGIS Server account is still able to connect while I'm doing database management tasks and it causes them to fail.

Encontre mais publicações marcadas com

Accepted answers

RandallWilliams

I would not grant a service account sysadmin rights. I'd delegate

SELECT, INSERT, UPDATE, and DELETE

All comments

RandallWilliams

I would not grant a service account sysadmin rights. I'd delegate

SELECT, INSERT, UPDATE, and DELETE

CortWilson

Thank you.

I mapped the ArcGIS Server account to all of it's associated databases with read/write privileges, then removed it from the sysadmin server role, and then had to re-boot the server for the changes to take effect.

rubatala

please can you provide me with steps and screenshot to do it??

CortWilson

Step 1: Grant read/write

Using SQL server management studio

expand the security tab, then the logins tab

open the properties for the AGS server account login (by default the username is "arcgis" and it could be a domain or local user), then click User mapping

in the top pane, select the db in question

now in the bottom pane check the boxes nect to datareader and datawriter roles

click ok

Step 2: Remove AGS account from sysadmin server role

Expand the security tab, expand the Server Roles tab

open the properties for the sysadmin role

select your AGS account user and click "remove"

Step 3: reboot the server.

I had our IT department do this for me.

Participe da Conversa

Membros conectados podem postar, seguir atualizações e mais. Novo aqui? Registre uma conta gratuita.

Links Rápidos

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.