Specific Role/permission required for MS SQL Database Instance

Nisha30
Kilo Sage

Hi ,

Can anyone assist what exact role is needed to discover SQL DB Instance. We have permissions at Windows server level, but to discover SQL DB at catalog level not sure if that term is correct, what permissions are required.

Thanks

1 ACCEPTED SOLUTION

@Nisha30 

 

Database catalog is similar to schema map and is a meta data repository for the database. You can lookup in google for simple explanation with example.

 

https://www.servicenow.com/docs/bundle/zurich-it-operations-management/page/product/discovery/concep...

 

Check with your DBA if SQL servers use Windows Authentication or SQL Authentication to be used for discovery. Refer below link to setup Windows credential and Application credential based on the authentication type.

 

https://www.servicenow.com/docs/bundle/zurich-it-operations-management/page/product/discovery/refere...

 

Check the pre-requisites mentioned for discovery as it uses WMI & MS SQL Server table permissions to collect the data. Below is the key section for MS SQL DB discovery,

Bhuvan_0-1756921559178.png

Once pre-requisites are met, you should be able to discover Server and Database CIs using MID Server and populate it in CMDB.

 

If this helped to answer your query, please mark it helpful & accept the solution. 

 

Thanks,

Bhuvan

View solution in original post

6 REPLIES 6

@Nisha30 

 

Thanks for marking the post as helpful.

 

If my response helped to guide you or answer your query, please accept the solution.

 

Thanks,

Bhuvan

garyminnick
Tera Contributor

I have these same questions.  Companies are becoming stricter in setting up permissions and want to know exactly what they are used for.  I have one account where we were actually pulling in MS SQL DB's and Instances with CI's getting created using the AD account for Discovery which is just a local admin of the server and has not been setup to have access to SQL.  I think it pulls most of that using the Root\xxx WMI namespaces with it seems a local admin account has access too.  When we setup the additional SQL permissions as stated in the docs, we retrieved no additional information.  No new records were created.  So, I am confused as well.