none
Need for sysadmin DB account for HPC installation

    Question

  • Dear all,

    I would like to understand why it is needed to have sysadmin permissions to the DB account which HPC uses to connect to database. Point 9 in https://technet.microsoft.com/en-us/library/ee783571(v=ws.11).aspx document suggests to have sysadmin permissions to this user. Can we have "dbcreator" permissions instead? Simply giving "sysadmin" permissions to this user doesn't look good from security perspective. 

    Thanks,

    Puneet


    Puneet Sharma

    Monday, March 26, 2018 6:08 PM

All replies

  • Which version of HPC are you using? Since HPC Pack 2012 on, sysadmin is no longer needed.

    Tuesday, March 27, 2018 4:01 AM
  • We are using HPC 2016 update1 and installing head node by installation UI. I wonder how should be deploy databases if user doesn't have sysadmin account.

    Puneet Sharma

    Tuesday, March 27, 2018 4:04 PM
  • We provide a SetupHpcDatabase.ps1 PowerShell script. You can ask the DB sysadmin to run the script to create the HPC databases and grant the minimal required DB permissions to HPC setup user and HPC head node machine accounts. 

    Or you can just grant db_owner role to HPC setup user and head node machine accounts for all HPC databases.

    Wednesday, March 28, 2018 3:21 AM