05-26-2009, 01:50 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,238
|
|
KB05201 - Permissions required for a BlackBerry Enterprise Server upgrade
KB05201 - Permissions required for a BlackBerry Enterprise Server upgrade
Environment
- BlackBerry® Enterprise Server version 4.1
Overview
Before installing or upgrading the BlackBerry Enterprise Server, you must consider the required Microsoft® SQL Server® permissions. Attempting to upgrade the BlackBerry Enterprise Server without the proper permissions will cause the installation process to fail. If this occurs, correct the permissions before attempting to install it again. For information on setting permissions for a new BlackBerry Enterprise Server installation, refer to the BlackBerry Enterprise Server Installation Guide that pertains to your platform.
Refer to following sections of this document for information on required permissions.
- When Elevated Permissions Are Not Required
- When Elevated Permissions Are Required
- List of Minimum Required Permissions
When Elevated Permissions Are Not Required (Upgrading BlackBerry Enterprise Server version 4.0 to 4.1)
Run the createdb.exe utility directly on the Microsoft SQL Server to avoid having to elevate permissions. The createdb.exe utility must be used on the Microsoft SQL Server itself. Since it is sometimes a requirement of the SQL administration group that new databases be created themselves, rather than programmatically, the upgrade is performed using the local administrator or SQL Administrator Windows® account credentials, not the BlackBerry Enterprise Server service account.
To update the BlackBerry Configuration Database on the Microsoft SQL Server with the createdb.exe utility, copy the database directory from the upgrade installation media to the Microsoft SQL Server. Refer to the BlackBerry Enterprise Server Installation Guide for instructions on using the createdb.exe utility.
Note: The database directory contains the createdb.exe utility as well as the SQL scripts needed to perform updates.
After the BlackBerry Configuration Database update, the BlackBerry Enterprise Server can be upgraded using the setup.exe file located with the software installation files. Thus, the BlackBerry Enterprise Server service account only needs the minimum administrative permissions in the BlackBerry Configuration Database.
When Elevated Permissions Are Required
For examples of BlackBerry Enterprise Server and BlackBerry Configuration Database update scenarios that require elevated SQL permissions for the BlackBerry Enterprise Server service account, refer to the following:
- Upgrading BlackBerry Enterprise Server version 4.0 to 4.1
In this scenario, the BlackBerry Enterprise Server upgrade process will be making changes to the BlackBerry Configuration Database schema, adding scheduled tasks, and perhaps error codes. Thus, it is a requirement that the BlackBerry Enterprise Server service account be granted the Server Administrator role within the Microsoft SQL Server.
- Upgrading BlackBerry Enterprise Server version 4.1 (4.1.0) to 4.1 Service Pack 1 (4.1.1)
In this scenario, it is recommended that you plan to use elevated permissions during the upgrade process. While it is not typical that database schema changes are included in a standard service pack, there might be new scheduled database maintenance scripts or error codes. Thus, it might be prudent to use elevated permissions.
Note: You can always use the createdb.exe utility directly on the Microsoft SQL Server with the SQL administrative account if you do not want to elevate the BlackBerry Enterprise Server service account.
List of Minimum Required Permissions
The following table summarizes the required permissions in the Microsoft SQL database for the BlackBerry Enterprise Server service account.
| SQL Database Role | Description | | Server Administrator | This role is needed to create or upgrade the BlackBerry Configuration Database. It can be removed once the database is created or upgraded.
The account used to create the BlackBerry Configuration Database should be automatically set as database owner (DBO).
| | RIM_DB_BES_SERVER | This role is needed for the BlackBerry Enterprise Server services and all the BlackBerry Enterprise Server administration tasks. It is created automatically during the database creation process and should not be removed.
This role can be considered as the minimum permission needed to run the BlackBerry Enterprise Server.
Note: In BlackBerry Enterprise Server software version 4.0, this role is required for all Windows accounts of users running the BlackBerry Manager remotely (in addition to any required messaging system permissions).
| | DB_Owner | The role can be substituted for the RIM_DB_BES_SERVER role.
|
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|
Linear Mode
