Why is SharePoint 2016 PSCONFIG Ugprade Failing with User Does Not Have Permissions?

C1TonyB 336 Reputation points
2020-10-05T13:59:23.557+00:00

I receive the following error during PSCONFIG upgrade:

Failed to upgrade SharePoint Products.
This is a critical task. You have to fix the failures before you can continue. Follow this link for more information about how to troubleshoot upgrade failures: http://go.microsoft.com/fwlink/?LinkId=259653


An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException was thrown. Additional exception information:
Upgrade [SearchAdminDatabase Name=SearchServiceXXXXX] failed. (EventID:an59t)

Exception: User does not have permission to perform this action. (EventID:an59t)

Upgrade Timer job is exiting due to exception: System.Data.SqlClient.SqlException (0x80131904): User does not have permission to perform this action.

The account I'm using to run PSCONFIG has sysadmin role and is db_owner on the database.

I reviewed the log file and checked application event viewer which refers to the error above.

Microsoft 365 and Office | SharePoint Server | For business
SQL Server | Other
0 comments No comments
{count} votes

Accepted answer
  1. sadomovalex 3,636 Reputation points
    2020-10-05T15:05:13.38+00:00

    Does user account has db_owner permissions on all databases? Ensure that it has permissions at least on configuration database and on all content databases (you may need to go through all of them one by one and check). Although it will be simpler to add on all databases used by Sharepoint (Search, User profiles, Taxonomy, etc). Often such problems are fixed by granting shell admin rights to the current user:

    Get-SPDatabase | Add-SPShellAdmin -Username CONTOSO\User1
    
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Emily Du-MSFT 51,846 Reputation points Microsoft External Staff
    2020-10-06T08:58:13.387+00:00

    @C1TonyB
    It’s a known issue in the SharePoint .

    As a workaround, you could use SQL Server Management Studio to review the database roles of each Search Service Application database. If you find a database role whose owner isn't "dbo," manually change the owner of the database role to "dbo." Then you can run the PSConfig tool again.

    Reference:
    Description of the security update for SharePoint Server 2016

    Similar question:
    Resolve security patch install issues on SharePoint Server 2016


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.