5.4 Preparing an MS SQL Server Database for Identity Governance

Ensure that you do not have an older version of the JDBC file in the:

When you install Identity Governance, the installation program places the correct JDBC file in the directory.

Install a supported version of SQL Server. For more information, see Database Server System Requirements.

Create the databases, logins, users, and roles using the following commands:

USE [master];
CREATE DATABASE [igops];
CREATE DATABASE [igdcs];
CREATE DATABASE [igwf];
CREATE DATABASE [igara];

ALTER DATABASE [igops] SET READ_COMMITTED_SNAPSHOT ON WITH NO_WAIT;
ALTER DATABASE [igdcs] SET READ_COMMITTED_SNAPSHOT ON WITH NO_WAIT;
ALTER DATABASE [igwf] SET READ_COMMITTED_SNAPSHOT ON WITH NO_WAIT;
ALTER DATABASE [igara] SET READ_COMMITTED_SNAPSHOT ON WITH NO_WAIT;

CREATE LOGIN [igops] WITH PASSWORD = 'password';
CREATE LOGIN [igdcs] WITH PASSWORD = 'password';
CREATE LOGIN [igwf] WITH PASSWORD = 'password';
CREATE LOGIN [igara] WITH PASSWORD = 'password';
GO

USE [igops]; 
CREATE USER [igops] FOR LOGIN [igops];
ALTER ROLE [db_owner] ADD MEMBER [igops];
CREATE ROLE [IG_REPORT_ROLE];
CREATE LOGIN [igrptuser] WITH PASSWORD = 'password';
CREATE USER [igrptuser] FOR LOGIN [igrptuser];
ALTER ROLE [IG_REPORT_ROLE] ADD MEMBER [igrptuser];
GO

USE [igdcs]; 
CREATE USER [igdcs] FOR LOGIN [igdcs];
ALTER ROLE [db_owner] ADD MEMBER [igdcs];
GO
 
USE [igwf]; 
CREATE USER [igwf] FOR LOGIN [igwf];
ALTER ROLE [db_owner] ADD MEMBER [igwf];
GO
 
USE [igara]; 
CREATE USER [igara] FOR LOGIN [igara];
ALTER ROLE [db_owner] ADD MEMBER [igara];
GO

(Optional) If you are installing Identity Reporting, also use the following commands:

USE [master];
CREATE DATABASE [reports];
ALTER DATABASE [reports] SET READ_COMMITTED_SNAPSHOT ON WITH NO_WAIT;
CREATE LOGIN [idm_rpt_cfg] WITH PASSWORD = 'password';
GO

USE [reports]; 
CREATE USER [idm_rpt_cfg] FOR LOGIN [idm_rpt_cfg];
GO

USE [reports]; 
GRANT EXECUTE ON [igops.max_risk_level] TO [IG_REPORT_ROLE];
GRANT EXECUTE ON [igops.min_risk_level] TO [IG_REPORT_ROLE];
GRANT EXECUTE ON [igops.risk_value] TO [IG_REPORT_ROLE];
GO

Then log into [reports] database directly and execute the following commands:

CREATE SCHEMA [idm_rpt_cfg] AUTHORIZATION [idm_rpt_cfg];
GO
ALTER AUTHORIZATION ON SCHEMA::[idm_rpt_cfg] TO [idm_rpt_cfg];
GO 

Specify the same password for all databases.

Create the reporting user igrptuser.

USE [igops]; CREATE LOGIN [igrptuser] WITH PASSWORD = 'igrptuser_password'; CREATE USER [igrptuser] FOR LOGIN [igrptuser];

Grant the reporting role to the reporting user.

USE [igops]; ALTER ROLE [IG_REPORT_ROLE] ADD MEMBER [igrptuser];

When installing Identity Governance, specify one of the following settings:

For more information about using SQL statements after installation, see Configuring the Databases after Installation.