Loading
search-img
Title
Minimum Permission Requirements for the App Portal Service Account

Summary

The App Portal Installation Guide states that DBO (db_owner) permissions are required by the App Portal Service Account. In more restrictive environments, db_owner permissions may not be acceptable. This article provides the minimum SQL Server requirements for the App Portal Service Account.

Synopsis

The App Portal Installation Guide states that DBO (db_owner) permissions are required by the App Portal Service Account. In more restrictive environments, db_owner permissions may not be permissible. This article provides the minimum SQL Server requirements for the App Portal Service Account.

Discussion

The db_owner role is not strictly necessary for App Portal to function. The db_owner role can do anything within the database. App Portal does not require the db_securityadmin or db_accessadmin, db_backupoperator, all of which are part of db_owner role; App Portal, however, will require more than the db_datareader and db_datawriter roles, as App Portal dynamically updates the schema in the App Portal database. This includes dropping and creating tables, columns, views, types, etc. As such, the service account requires both drop and create permissions to various objects in the DB. The db_ddladmin role will cover these requirements.

At a minimum, the following roles are necessary in order for App Portal to function:

App Portal DB:
db_ddladmin (needed for various create/drop operations performed by App Portal)
db_datawriter
db_datareader
db_executor (for execute permissions. See below)

SCCM DB:
db_datareader
db_executor

NOTE: Use the following to create the db_executor role:
-- Create a db_executor role
CREATE ROLE db_executor
-- Grant execute rights to the new role
GRANT EXECUTE TO db_executor

It is not strictly necessary to create the new db_executor role, but it is a convenient way to EXECUTE permissions to an account.


Related KB Articles

Please see the App Portal/App Broker 2016 Installation Guide for a full set of requirements.
Was this helpful?
Support Hub
Product
App Broker/App Portal
Deployment type
On-premises
Visibility
Guest
URL Name
minimum-permission-requirements-for-the-app-portal-service-account

Related Articles

Create a case with Support
0/255
Upload Attachment
File Upload
Maximum file size allowed is 3 MB.
File type not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)

Are you sure you want to cancel the case creation?

Are you sure you want to close this case

Get Hotline support
Products Region Phone Numbers
FlexNet Operations
FlexNet Embedded
FlexNet Publisher
FlexNet Connect
FlexNet Code Insight
InstallAnywhere
InstallShield 		North America  * +1 630-332-2513 (toll)
+1 877-279-2853 (toll-free in North America)
Europe  * +44 1925 944367 (toll)
+44 800 047 8642 (toll-free in Europe)
Japan  * +81 3-4540-5335 (select option 2)
Australia  * +61 3 9895 2177
+61 1800 560 603 (toll-free in Australia)
Usage Intelligence (formerly Revulytics)
Compliance Intelligence 		Please use the Case Portal to submit your support ticket or reach out to your Revenera contact.
Book an Appointment
File Upload
Maximum file size allowed is 3 MB.
File type not supported.
Supported file types:
Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)
+1.800.374.4353
CONTACT US REVENERA.COM FLEXERA.com
© 2026 Flexera Software. All Rights Reserved.
Privacy policy Terms and conditions Flexera Community Contact Us
Loading
Minimum Permission Requirements for the App Portal Service Account