Databases

To store data, Axidian Privilege uses the following databases:

• Core — the Core component database. Used to store privileged account data, resources, permissions, and other service data.
• CoreJobs — the Core component database. Used to store and run background jobs, such as resource and account synchronization, password changes, session management, and artifact rotation.
• Idp — the IdP component database. Used to store authenticators of Axidian Privilege users and administrators.
• IdpJobs — the IdP component database. Used to run background authentication service jobs.
• ILS — the Log Server component database. Used to store Axidian Privilege events.

Create databases

MSSQL

1. Open Microsoft SQL Server Management Studio (SSMS) and connect to your Microsoft SQL Server instance.
2. In Object Explorer, right-click Databases, and then select New Database.
3. Create the following databases: Core, CoreJobs, Idp, IdpJobs, and ILS.

PostgreSQL

pgAdmin

1. Open pgAdmin and connect to your PostgreSQL instance.
2. Right-click Databases, and then select Create → Database.
3. Create the following databases: Core, CoreJobs, Idp, IdpJobs, and ILS.

psql command-line client

1. Open a terminal as root.

2. Connect to your PostgreSQL instance as the postgres superuser:

   psql -U postgres -h <host> -p <port>
   • host — the IP address or DNS name of the server
   • port — the port number (default: 5432)

   After you connect, the command prompt changes to postgres=#.

3. Create the following databases: Core, CoreJobs, Idp, IdpJobs, and ILS.
   To preserve the case of the database names, enclose each name in double quotation marks.

   CREATE DATABASE "Core";
   CREATE DATABASE "CoreJobs";
   CREATE DATABASE "Idp";
   CREATE DATABASE "IdpJobs";
   CREATE DATABASE "ILS";

4. Verify that the databases were created:

   \l

Create a service account

MSSQL

1. Open Microsoft SQL Server Management Studio (SSMS) and connect to your Microsoft SQL Server instance.
2. In Object Explorer, expand Security.
3. Right-click Logins, and then select New Login.
4. In Login name, enter a name for the account, for example, IPAMSQLServiceOps.
5. Select SQL Server authentication, and then fill in the required fields.
6. Go to the User Mapping page.
7. Select the Core, CoreJobs, Idp, IdpJobs, and ILS databases.
8. For the selected databases, select the db_owner, db_datareader, and db_datawriter roles.
9. Select OK.

info

The db_owner role is required only for the first connection to the database.

To use Axidian Privilege, install a certificate for your Microsoft SQL Server instance.

PostgreSQL

pgAdmin

1. Open pgAdmin and connect to your PostgreSQL instance.
2. Right-click Login/Group Roles.
3. Select Create → Login/Group Role.
4. In Name, enter a name for the account, for example, IPAMSQLServiceOps.
5. On the Definition tab, in Password, enter a password for the account.
6. On the Privileges tab, turn on Can login? and Superuser?.
7. Select Save.

psql command-line client

1. Open a terminal as root.

2. Connect to your PostgreSQL instance as the postgres superuser:

   psql -U postgres -h <host> -p <port>
   • host — the IP address or DNS name of the server
   • port — the port number (default: 5432)

   After you connect, the command prompt changes to postgres=#.

3. Create a role with a name and password:

   CREATE ROLE "<username>" WITH LOGIN PASSWORD '<password>' SUPERUSER;
   • username — the account name, for example, IPAMSQLServiceOps.
     To preserve the case of the name, enclose it in double quotation marks.
   • LOGIN — allows the role to connect to the database server.
   • PASSWORD — sets the role password. Replace password with a password, for example, DB_Prod_Password789!.
   • SUPERUSER — grants superuser privileges to the role.
     
     
   info

   Superuser privileges are required only for the first connection to the database.

4. Verify that the role was created and that the Attributes column contains Superuser:

   \du "<username>"