Synchronisation Setup for Restricted Permissions

There are many situations where users will not be granted high-level permissions or roles in SQL Server such as sys_admin or even db_owner. This topic provide information about the minimum permissions required so that administrators and data logging users of Geobank Mobile can utilise the synchronisation functionality.

This information applies to SQL Server instances on physical machines and virtual or cloud-based machines.

The base minimum permissions are db_datareader, db_datawriter and db_ddladmin, with other required manager and user permissions granted through custom roles: gm_manager and gm_executor respectively. It is also necessary for the users or groups to have their default schema set to dbo; if the default schema is blank, SQL server will use the non-db_owner default which may result in incorrectly named tables and the synchronisation not working. Geobank Mobile (from version 2.4 SP2) will warn the manager if it suspects the default schema has not been set to dbo.

Initial set up of the database on a SQL server

Given the scenario described above, neither manager nor regular users will be given permission to create a new database, The ICT database administrators will need to carry out a set of one-off tasks to create a blank sync database and set up permissions. The 4 scripts below can be updated and used for this purpose:

Synchronisation Setup