System Center Orchestrator 2022 - Web API and Console - Database Permissions

Question

Hi,

I just upgraded to SCO 2022. What database permissions is required for SCO 2022 after installation for the Web API and Console?

SCO Console fails with a WebAPI status 500 error when DB_Owner role is removed. I'd like to avoid granting DB_Owner role.

We have always had our account in these DB roles:

• app_grp
• Microsoft.SystemCenter.Orchestrator.Admins
• Microsoft.SystemCenter.Orchestrator.Operators
• Microsoft.SystemCenter.Orchestrator.Runtime

Everything works besides the new web API and console.

Answer 1

Hi,

execute these two SQL statements against Orchestrator DB:

GRANT EXECUTE ON object::[Microsoft.SystemCenter.Orchestrator].[GetSecurityToken] TO [Microsoft.SystemCenter.Orchestrator.Operators]
GRANT SELECT ON object::[Microsoft.SystemCenter.Orchestrator.Internal].[Settings] TO [Microsoft.SystemCenter.Orchestrator.Operators]

Regards,

Stefan

Answer 2

These 3 lines were ran for me:

GRANT EXECUTE ON object::[Microsoft.SystemCenter.Orchestrator].[GetSecurityToken] TO [Microsoft.SystemCenter.Orchestrator.Operators]

GRANT SELECT ON object::[Microsoft.SystemCenter.Orchestrator.Internal].[Settings] TO [Microsoft.SystemCenter.Orchestrator.Operators]

GRANT SELECT ON object::[Microsoft.SystemCenter.Orchestrator.Internal].[AuthorizationCache] TO [Microsoft.SystemCenter.Orchestrator.Admins]