Access rights for a Microsoft SQL Server database

Several permissions in the Microsoft SQL Server database are required by Kofax TotalAgility to perform relational searches. These permissions are necessary in order to access tables and views.

The login object must have the following permissions, at a minimum

• CONNECT SQL

• VIEW ANY DATABASE

The login object must not have the following permission denied

• VIEW ANY DEFINITION

Database level permissions

• The "database user" must be a member of the "public role" group, which is the default group when a user is created.

• The "database role" or the "database user" if you are not using roles, must have the following permissions.

  • CONNECT must be granted to the database user so that the mapped log on user can access the database.

  • VIEW DEFINITION must be granted to populate the corresponding combo box with the available tables and views. Alternatively, you can set the VIEW ANY DEFINITION permission at the server level for a log on.

  • SELECT must be granted at the database level or for each table or view objects.

• In order to list the databases, tables, and views that are available on the server, as well as getting the object column name and types, the following system metadata permissions are required.

  • SELECT for the following system views:

    • sys.databases

    • sys.tables

    • sys.types

    • sys.assemblies

    • sys.objects

    • sys.assembly_types

    • sys.synonyms

  • EXECUTE for the following stored procedure.

    • sys.sp_columns_managed

    These are the default permissions set on the public role.