How to assign minimum roles to users connecting to the SQL Server of Orchestrator

Japan Knowledge Base
1

Question/Problem
I would like to know how to grant the minimum roles to users connecting to the SQL Server of the Orchestrator terminal.

Resolution

Below are the role memberships corresponding to the database (default: UiPath).

If you are creating the database (if the database is not created during the installer execution), the dbcreator role is required.

If you are not creating the database (if an empty database has been created before running the installer), it is sufficient to have the db_owner role for the corresponding database, but if you wish to use minimum privileges weaker than the db_owner role from a security perspective, please use all of the following permissions:

References

Installation Prerequisites

- Excerpt -
Regardless of the type of user connecting to SQL Server (domain or SQL), it is necessary to assign the dbcreator server role to the user before installing Orchestrator, because the database will be created during this installation process. After the database creation, enter the user that connects to the SQL database with the db_owner user mapping role. If the db_owner user mapping role cannot be used due to security regulations in UiPath login, please set the following permissions.

  • db_datareader

  • db_datawriter

  • db_ddladmin

  • EXECUTE permission on the dbo schema

    • The EXECUTE permission must be granted using the GRANT EXECUTE SQL command as follows:

      • If using Windows Integrated Authentication:

        USE UiPath
        GO
        GRANT EXECUTE ON SCHEMA::dbo TO [domain\user]
        GO

      • If using SQL Server Authentication:

        USE UiPath
        GO
        GRANT EXECUTE ON SCHEMA::dbo TO [sql_user]
        GO