Update Vault System Requirements Page to Contain SQL Server Permission Pre and Post install

[kyle_stalkerSBS22]

The current documentation for each Vault has no permission requirements outlined in the requirements page. 

I had to search across the Knowledge bases and contact support to locate: 

https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Disable-sa-user-af... 

and
https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Failed-connecting-...

This knowledge was obscure and in environments implementing least privilege or migrating to an already established cluster, the applications SQL permissions are foremost in the deployment phase. 

Therefore, this information is intuitively expected as a system requirement, as leaving a critical system sitting on a SA account is irresponsible and a breach of Cyber Essentials. 

 This Idea is to include the information from the first link into the documentation below:

https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/System-requirement... 

[ihayesjr]

Hi @kyle_stalkerSBS22 

I moved your post from the Ideas board to the discussion forum.

Your request is more of a "configuration" requirement and not a "system" requirement. Therefore this isn't something we would add to the system requirements page but we could add more information in the Help.

What is provided in our Help is the following, which provides steps on installing SQL before installing Vault and how to configure it.

Vault 2024 Help | SQL Administration Tasks for Autodesk Vault | Autodesk

Vault will create the other SQL accounts as necessary based on the edition and the configuration of the Vault environment. 

The SQL Vaultsys account will get created at installation with a default password and you can change it post installation.

Vault 2024 Help | Change the Password for a SQL Service Account | Autodesk

Vault will also create what we call an impersonation account, which you can change as necessary.

Vault 2024 Help | Access Advanced Server Settings | Autodesk

The SQL SA account is only used for these commands.

• Restore the Vault.
• Migrate Vault Data.
• Migrate Vault Data after Installing a hotfix or an Update.
• Import Library.
• Attach Library.
• Detach Library.
• Rename Server.
• Create Master Vault.
• Create Vault.
• Attach Vault.
• Detach Vault.
• Enable Replication.
• Add Workgroup.

Vault does not store the password for this account so anytime they are executed, the server will prompt the user for the account and password to use. You can disable the SA account and use a different account in it's place.

I wrote the following blog article a log time ago and will add it to the Help.

Vault FAQ - Under the Hood - All things PDM and PLM (autodesk.com)