Databases
To store data, Axidian Privilege uses the following databases:
- Core — Axidian Privilege Core component database is used to store Axidian Privilege privileged accounts, resources, permissions, and other service data.
- CoreJobs — Axidian Privilege Core component database is used to store scheduled jobs.
- Idp — IdP component database is used to store authenticators of Axidian Privilege users and administrators.
- IdpJobs — IdP component database is used to store scheduled jobs.
- LS — Log Server component database is used to store the Axidian Privilege events.
Database Creation
- MSSQL
- PostgreSQL
- Launch Microsoft SQL Management Studio (SSMS) and connect to Microsoft SQL Server instance.
- Open the context menu of Databases item.
- Select the New Database item.
- Specify a database name, for example Core, CoreJobs, Idp, IdpJobs, LS.
- Click ОK.
- Launch pgAdmin and connect to the PostgreSQL server.
- Open the context menu of the Databases item.
- Select Create, Database.
- Specify a database name, for example: Core, CoreJobs, Idp, IdpJobs, LS.
- Click Save.
Creating a Service Account to Work with Data Storage
- MSSQL
- PostgreSQL
- Start Microsoft SQL Management Studio (SSMS) and connect to the Microsoft SQL Server instance.
- Expand the Security item.
- Open the context menu of Logins item.
- Select the Create login item.
- Enter the name, for example IPAMSQLServiceOps.
- Select SQL Server authentication item and fill in the required fields.
- Switch to User Mapping item.
- Check Core, CoreJobs, Idp, IdpJobs and LS databases.
- Check database roles db_owner, db_datareader and db_datawriter.
- Click ОK.
note
The grants db_owner for Microsoft SQL Server is required only for the first access to the database.
note
A certificate for the MSSQL instance is required for Axidian Privilege.
- Launch pgAdmin and connect to the PostgreSQL Pro server.
- Open the context menu of the Login/Group Roles item.
- Select Create, Login/Group Role.
- Specify a Name, for example IPAMSQLServiceOps.
- Go to Definition tab, enter the new password for account.
- Go to Privileges tab, check Yes for Can Login? and Superuser? items.
- Click Save, repeat for the rest of the databases.
note
The Superuser for PostgreSQL is required only for the first access to the database.