SQL Server Login Accounts - Metasys - LIT-1201528 - General System Information - Metasys System

SQL Server Login Accounts - Metasys - LIT-1201528 - General System Information - Metasys System - 12.0

Security Administrator System Technical Bulletin

Product

Building Automation Systems > Building Automation Systems > Metasys System

Document type

Technical Bulletin

Document number

LIT-1201528

Version

12.0

Revision date

2022-08-05

SQL Server login accounts are used for communications between the Metasys services and the databases that they rely on. Metasys devices and Metasys users access the Metasys services which make a connection to the databases using the login accounts described in the following tables. These accounts access the databases described in Table 1.

Table 1. Metasys server default user names
User Label	Account Purpose	Default Account Name	Database Name	Database Role Membership
XMS DB User	Read/write site configuration information	ads-user	XMS	db_owner
Historian DB User	Read/write the historical (trend) database	ads-user	JCIHistorianDB	db_owner
Events DB User	Read/write the events database	ads-user	JCIEventsDB	db_owner
Audit DB User	Read/write the audit database	ads-user	JCIAuditTrails	db_owner
Security DB User	Authentication/authorization service uses to retrieve authentication and authorization information from the security database	g3-AuthUser	MetasysIII	db_owner
Annotation DB User	Annotation database uses to read/write annotations in MVE	ads-user	JCIItemAnnotation	db_owner
Fault Detection and Triage DB User	Read/write fault data that displays in the Faults tab of the Potential Problem Areas widget	ads-user	MetasysFault	db_owner
	Read/write Fault Triage data that displays in the Fault Triage feature	ads-user	MetasysFaultTriage	db_owner
	Read/write point data that displays in the Points tab of the Potential Problem Areas widget	ads-user	MetasysValue	db_owner

Table 2. Additional Default User Names
User Label	Account Purpose	Default Account Name	Database Name	Server Roles
ARS DB User	Reporting component of ADX uses to access the reporting database and the configuration archive	g3-MetasysReportServer Note: The account name is read-only.	MetasysReporting, MetasysTranslation Dictionary, MetasysValue, MetasysFault, MetasysFaultTriage, and SCTTranslationDictionary	db_datareader, public
Reporting DB User	Access the Metasys UI reporting database	ads-user	SpacesAuthorization database and JCIReportingDB	db_owner

¹ In a split ADX configuration, the Advanced Reporting component uses the g3-MetasysReportServer account to access data on the ADX data server through a linked server connection in the ADX database. ¹