VMware VS4-ENT-PL-A - vSphere Enterprise Plus Setup Manual page 35

15 Revoke the VC_ADMIN_ROLE from the user [vpxuser] in the vCenter Server database.
After you revoke the role, you can leave the role as inactive for use in future upgrades, or remove the
role for increased security. If you remove the role, you must recreate the role and assign it to the user
[vpxuser] before any future upgrade of vCenter Server.
The hardcoded dbo role is removed from
What to do next
"Use a Script to Create a Microsoft SQL Server Database Schema and Roles,"
Set Database Permissions by Using the dbo Schema and the db_owner Database
Role
If you use Microsoft SQL Server database, the simplest way to assign permissions for a vCenter Server
database user is through the database role db_owner. Assign the db_owner role to the vCenter Server
database user on both the vCenter and MSDB databases.
Alternatively, experienced database administrators can set permissions by creating database roles and the
VMW schema manually. See
VMW Schema," on page 34 and
Roles," on page 36. That method, available beginning with vSphere 5.0, is recommended, because it gives
the database administrator greater control over database permissions. The recommended method also
removes the requirement to set up the database dbo schema and db_owner role for vCenter Server users
who install and upgrade vCenter Server.
Prerequisites
Create the vCenter Server database. See
page 33
Procedure
1 Assign the role dbo to the vCenter Server and Microsoft SQL databases.
2 For any user who will install or upgrade vCenter Server, assign the user the default schema dbo.
When you install vCenter Server, the installer uses the default dbo schema to assign permissions to the
db_owner role.
Use a Script to Create a vCenter Server User by Using the dbo Schema and
db_owner Database Role
If you set database permissions by using the dbo schema and db_owner database role, you can use a script
to create a vCenter Server user with the db_owner database role.
Alternatively, experienced database administrators can set permissions by creating database roles and the
VMW and SQL Server database schemas. See
Roles and the VMW Schema,"
and Roles," on page 36. That method, available beginning with vSphere 5.0, is recommended, because it
gives the database administrator greater control over database permissions. That method removes the
requirement to set up the database role dbo and db_owner schema for vCenter Server users who install and
upgrade vCenter Server.
Prerequisites
Create the vCenter Server database. See
page 33
VMware, Inc.
VCDB_mssql.sql
"Set Database Permissions By Manually Creating Database Roles and the
"Use a Script to Create a Microsoft SQL Server Database Schema and
"Create a SQL Server Database and User for vCenter Server,"
"Set Database Permissions By Manually Creating Database
on page 34"Use a Script to Create a Microsoft SQL Server Database Schema
"Create a SQL Server Database and User for vCenter Server,"
Chapter 3 Before You Install vCenter Server
.
on page 36
on
on
35