SQL Server Login Accounts - Metasys - LIT-1201528 - General System Information - Metasys System - 10.1

Security Administrator System Technical Bulletin

Brand
Metasys
Product name
Metasys System
Document type
Technical Bulletin
Document number
LIT-1201528
Version
10.1
Revision date
2020-01-21
Language
English

SQL Server login accounts are used for communications between the Metasys services and the databases that they rely on. Metasys devices and Metasys users access the Metasys services which make a connection to the databases using the login accounts described in the following tables. These accounts access the databases described in Table 1.

Table 1. Metasys server default user names
User Label Account Purpose Default Account Name Database Name Database Role Membership

XMS DB User

Read/write site configuration information

ads-user

XMS

db_owner

Historian DB User

Read/write the historical (trend) database

ads-user

JCIHistorianDB

db_owner

Events DB User

Read/write the events database

ads-user

JCIEventsDB

db_owner

Audit DB User

Read/write the audit database

ads-user

JCIAuditTrails

db_owner

Security DB User

Authentication/authorization service uses to retrieve authentication and authorization information from the security database

g3-AuthUser

MetasysIII

db_owner

Annotation DB User

Annotation database uses to read/write annotations in MVE

ads-user

JCIItemAnnotation

db_owner

Table 2. Additional Default User Names
User Label Account Purpose Default Account Name Database Name Server Roles

ARS DB User

Reporting component of ADX uses to access the reporting database and the configuration archive

g3-MetasysReportServer

Note: The account name is read-only.

MetasysReporting, MetasysTranslation Dictionary, and all other Metasys databases

db_datareader, public

Reporting DB User

Access the MUI reporting database

ads-user

SpacesAuthorization database and JCIReporting database

db-owner

Note: These user names are created at Metasys 8.1 and earlier. These user names do not apply to Metasys releases earlier than 8.1.
1 In a split ADX configuration, the Advanced Reporting component uses the g3-MetasysReportServer account to access data on the ADX data server through a linked server connection in the ADX database. 1