Required SQL permissions

Specific SQL Server roles are required for the account used by ePO - On-prem.

For new ePO - On-prem installation...	Use these server roles
During installation	The user account credentials for Windows or SQL authentication must have these server roles granted on the target SQL Server: public dbcreator Note The dbcreator server role is required for the setup program to create and add the core ePO - On-prem database objects to the target SQL Server during installation. This ePO - On-prem SQL user account is granted the database role permission db_owner for the ePO - On-prem database.
After the database is created	The dbcreator server role can be removed from the ePO - On-prem SQL user. Note Revoking the dbcreator server role restricts the user account to only those permissions granted to the db_owner database role on the ePO - On-prem database.

For new ePO - On-prem installation...

Use these server roles

During installation

The user account credentials for Windows or SQL authentication must have these server roles granted on the target SQL Server:

public
dbcreator

Note
The dbcreator server role is required for the setup program to create and add the core ePO - On-prem database objects to the target SQL Server during installation.

This ePO - On-prem SQL user account is granted the database role permission db_owner for the ePO - On-prem database.

After the database is created

The dbcreator server role can be removed from the ePO - On-prem SQL user.

Note
Revoking the dbcreator server role restricts the user account to only those permissions granted to the db_owner database role on the ePO - On-prem database.

For an upgrade or patch installation...	Use these roles
During installation	The account credentials for Windows or SQL authentication must have these server roles granted on the target SQL Server: public dbcreator