Does Vault server require a SQL SA user, can the user be disabled?

Autodesk Support

Aug 6, 2024

Products and versions covered

Issue:

There are questions about the Vault SA account, including the following:
  • Does installing Vault server require a SQL SA (system administrator, sysadmin or super admin) user?
  • After installing Autodesk Vault Server is it possible to disable the SQL "sa" user account in the Autodesk Vault instance?
  • Does Vault Server support disabling the "sa" account after installation and what are the implications?

Causes:

  • SQL security policies.

Solution:

  • Does installing Vault server require a SA account?
    • The latest versions of Vault allow installation with a different named account than SA.
    • The installation still requires a user with sysadmin role in SQL.
    • Vault is intended to be an accessible software for users without configuring SQL server, that is why the account is needed to install the software as the server uses the account to perform tasks in the background.
  • Is it possible to disable the "sa" account after installing Vault Server?
  • Yes, it is possible to disable the sa account in the Autodesk Vault SQL instance after installing Vault Server. The Microsoft SQL software does not block this from happening.
  • Does Vault Server support disabling the "sa" account after installation?
  • Vault Server does not support changing the Microsoft SQL "sa" account after installation as there is no interface to do this.
  • Vault Server does support using a different "sa" account during the installation. Uninstalling and reinstalling Vault Server is normally quick, will not delete any production data, and is the safest option in case a different account is needed.
  • What are the implications of disabling the "sa" account after the Vault Server is installed?
  • Some Vault features require the usage of the SQL “sa” account or a SQL account with as many permissions. When the “sa” account is disabled, Vault Servers Autodesk Data Management Server (ADMS) Console will prompt the administrator to input the SQL account to be used for the execution of that command.
  • Vault Servers command line features that require the SQL “sa” account will need a SQL account with as many permissions to execute the command.
  • These functions include:
  • Delete\Create Master Vault.
  • Attach\Detach Vault.
  • Attach\Detach Library.
  • Migrate Vault Data.
  • Migrate Vault Data after Installing a hotfix or an Update.
  • Import Library.
  • Rename Server.
  • Enable Replication.
  • Add Workgroup.
 

 

Products:

Vault Basic; Vault Professional; Vault Workgroup;

Was this information helpful?

Need help? Ask the Autodesk Assistant!

The Assistant can help you find answers or contact an agent.

Ask the Assistant

What level of support do you have?

Different subscription plans provide distinct categories of support. Find out the level of support for your plan.

View levels of support