Cisco Cisco Process Orchestrator 3.0 Guida All'Installazione

DB2 rights are only if you want to use the DB2 adapter. PO does not support a DB2 back end 
database. 

After assigning the user account to the SYSMON group, the DB2 instance needs to be restarted 
to ensure that the privilege is active.

The user account should have Select access on the following SAP tables: 

SNAP

EDIDC

For the Reporting Services server that runs on Windows Server, users who import reports should be a 
direct member of the Local Administrators group on the Reporting Services server machine.

The import report process will not work if a user is a member of a global group and the global group is 
a member of the Local Administrators group. 

If SQL Server Windows authentication is being used, the following access rights must be set on the 
machine where Cisco Process Orchestrator is installed. To change the connection settings through the 
database user configuration utility on Cisco Process Orchestrator server, the logged in user needs to have 
db_datareader, db_datawriter, db_ddladmin (roles with dbo default schema) permission to the Cisco 
Process Orchestrator installation folder. 

Windows Server 2012—The following user rights are required: 

The user account that connects to the database must be assigned Logon as Service rights. 

If SQL authentication is being used, the user account that connects to the database must have sysadmin 
(sa) rights on the machine where PO is installed. However, if the company requires a higher level of 
security restrictions than allowing the standard sysadmin access, then use the following scripts to create 
the logon script for access.

Use the following logon SQL script to create the necessary credentials for accessing the Cisco Process 
Orchestrator processes database. 

IF  EXISTS (SELECT * FROM sys.server_principals WHERE name = N'orchestratorprocess')

DROP LOGIN [orchestratorprocess]

GO

CREATE LOGIN [orchestratorprocess] WITH PASSWORD=N'cpo', 

DEFAULT_DATABASE=[OrchestratorProcess], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF

--For Windows authentication

--CREATE LOGIN [domain\userID] FROM WINDOWS WITH DEFAULT_DATABASE=[ OrchestratorProcess]

GO

USE [OrchestratorProcess]