Management database permissions

Management database permissions allow users or groups to modify different aspects of an installation’s management database. By default, the Master Auditor and the management database administrator have Full Control over the management database and can assign the following permissions to other users and groups:

This permission Enables trustees to do this

Full Control

Perform all administrative tasks on the selected management database and assign permissions to other users and groups.

Change Permissions

Add, modify, or remove Active Directory users and groups that have specific permissions.

A user or group granted this permission can display the properties for the management database, then click the Security tab to select permissions for other users and groups.

Modify Name

Modify the name displayed for the selected management database.

A user or group granted this permission can display the properties for the management database, then click the General tab to change the management database name.

Manage Scopes

Add, modify, or remove sites or subnets for a management database.

A user or group granted this permission can display the properties for the management database, then click the Scope tab to add or remove sites and subnets.

Remove Database

Remove a management database from an installation.

Deleting the management database from Microsoft SQL Server requires additional SQL Server permissions.

Manage SQL Logins

Add or remove the Allowed incoming users for the selected management database.

A user or group granted this permission can display properties for the management database, then click the Advanced tab to add or remove allowed accounts, or to change the outgoing account or authentication type.

Manage Database Trace

Enable, disable, or export database traces for the selected management database.