Installation accounts
You can install all the infrastructure components as the administrative user. You can also install some components as a non-administrative user but some limitations apply.
Account | Account Permissions and Roles |
---|---|
OS Account to install and run BigFix Inventory server | User with administrative privileges with the log on as a
service permission. If you want to use the Windows authentication mode and your database server is remote, ensure that the user that accesses the database is a domain user. This user needs to have the dbcreator or sysadmin rights in MS SQL database. |
OS Account to install and run SQL Server database | User with administrative privileges |
SQL Server database user for BigFix Inventory database | User account that either:
User has the default language set to "English" (not a variety of English). The
permissions required for non system admin are:
|
SQL Server database user for BigFix Inventory to access SQL Server BigFix Platform BFEnterprise database | Database user has have following permissions on BFEnterprise database:
CREATE FUNCTION , CREATE SCHEMA , CREATE
TABLE , CREATE VIEW , EXECUTE ,
SELECT User has the default language set to "English" (not a variety of English). Once BigFix Inventory is installed or updated and the first data import is complete, MS SQL users with lower permissions can access BigFix Platform database. Before any BigFix Inventory update, the data source must be reconfigured to allow the database user, db_owner access to BigFix Platform database. If you do not reconfigure the data source, the next data import might fail. Following are the required minimal permission for a user on BigFix Platform database to run regular import:
|
SQL Server database user for BigFix Inventory to access SQL Server BigFix Platform Web Reports database (BESReporting) | User has the default language set to "English" (not a variety of
English).SELECT |
Account | Account Permissions and Roles | Limitations |
---|---|---|
OS Account to install and run BigFix Inventory server | root or non-root user | Server that is installed by a non-root user is not registered as a system service. It also cannot be upgraded with a fixlet. It must be upgraded in interactive or silent mode. |
OS Account to install and run DB2® database | root or non-root user | For information about limitations that apply when you install DB2® as a non-root user, see the following links. |
DB2 database user for BigFix Inventory database | To allow the application installation and operation user with
authorities: DBADM, DATAACCESS, and ACCESSCTRL is required. There is recommended to create a dedicated database user for BigFix Inventory with about authorities. The user got assigned roles and permissions for created BigFix Inventory Database during database creation. |
|
DB2 database user for BigFix Inventory to access DB2 BigFix Platform database (BFENT) | DBAUTHDATAACCESS | |
DB2 database user for BigFix Inventory to access DB2 BigFix Platform Web Reports database (BESREPOR) | DATAACCESS |