Try It
Print

Configure Database Access

Copy the URL link to this section to share

In order to read data from the ConfigMgr database an account with at least read access to the database is required. This can be an Active Directory user or a SQL user account. In this example we are using an Active Directory user account. As a best practice this account should be a dedicated service account following the principle of least privilege.

Step

  1. Identify, or create, an account to be used as the database reader account.
  2. In SQL Management Studio connect to your ConfigMgr database.
  3. Expand the database in which to create the new database user.
  4. Right-click the Security folder, point to New, and select User....
(click to enlarge)
Step

  1. In the Database User - New dialog box, on the General page, select a user types from the User type list.
  2. Enter the User name for the database reader account. If you have chosen Windows user from the User type list, you can also select the ellipsis (...) to open the Select User or Group dialog box.
(click to enlarge)
Step

  1. In the Database User - New dialog box select the Owned Schemas page.
  2. Select db_datareader.
  3. Select OK.
(click to enlarge)