How to Grant Staging Accounts Access to the Databases

Article
11/12/2009

For the latest version of Commerce Server 2007 Help, see the Microsoft Web site.

This topic provides steps for granting Commerce Server Staging (CSS) authentication accounts access to a SQL Server database. You must create an SQL Login account on the database server for each service that must access a Commerce Server database. This limits the service accounts to the access that is required to perform their functions. The SQL Server roles are created for you during the unpacking of the site.

For each account that requires access to the SQL Server database, you perform the following sequence of tasks:

Create the database account in SQL Server.
Associate the database account together with the database roles required for that account.

Procedures for creating these accounts are provided later in this section for SQL Server 2000 and SQL Server 2005.

For information about database access requirements for CSS, see What Database Access Permissions Must You Grant to CSS Authentication Accounts?

To create the database accounts in SQL Server 2000

Click Start, point to Programs, point to Microsoft SQL Server, and then click Enterprise Manager.
In SQL Server Enterprise Manager, expand Microsoft SQL Servers, expand SQL Server Group, expand <SQL cluster name>, expand Security, right-click Logins, and then click New Login.
In the SQL Server Login Properties - New Login dialog box, on the General tab, in the Name box, type <domain name>\<account name>, and then click OK.
Repeat this procedure for all remaining accounts you must create.

To create the database accounts in SQL Server 2005

Click Start, point to Programs, point to Microsoft SQL Server 2005, and then click SQL Server Management Studio.
In the Connect to Server dialog box, click Connect.
In SQL Server Management Studio, expand SQL Server computer, expand Security, right-click Logins, and then click New Login.
In the Login - New dialog box, in the Login name box, type <domain name>\<account name>, and then click OK.
Repeat this procedure for all remaining accounts you must create.

To associate the database accounts together with the database roles in SQL Server 2000

On the design-time computer that is running SQL Server, click Start, point to All Programs, point to Microsoft SQL Server, and then click Enterprise Manager.
In SQL Server Enterprise Manager, expand Microsoft SQL Servers, expand SQL Server Group, expand <server name>(Windows NT), expand Security, and then click Logins.
In the right pane, right-click the database account, and then click Properties.
In the SQL Server Login Properties <account name> dialog box, on the Database Access tab, in the top box, select a database.
In the bottom box, specify the role for the account, and then click OK.
Repeat steps 3 through 5 until all the required accounts are associated with the specified database roles, and then click OK.

Note

You must be on the active node of a SQL Server Cluster to change the settings for accounts and roles.

To associate the database accounts together with the database roles in SQL Server 2005

On the design-time computer that is running SQL Server, click Start, point to All Programs, point to Microsoft SQL Server 2005, and then click SQL Server Management Studio.
In the Connect to Server dialog box, click Connect.
In SQL Server Management Studio, expand <server name>(Windows NT), expand Security, expand Logins, right-click the database account, and then click Properties.
In the Login Properties <account name> dialog box, in the left pane, click User Mapping.
In the right pane, in the Users mapped to this login box, in the Map column, select the check box for the appropriate database.
In the Database role membership for <database name> box, select the check box for the appropriate role on the database, and then click OK.
Repeat steps 3 through 6 until all the required accounts are associated with the specified database roles, and then click OK.