When you install the CommServe computer, the software creates specific SQL accounts to:
-
Import Dynamic-Link Library (DLL) files to the CommServe database. This applies for any CLR DLL files in the SQL Server.
-
Commvault software uses the users to create internal database connections.
The software creates the following SQL accounts:
-
CVDBCLRLogin
-
sqladmin_cv
-
sqlexec_cv
-
sqlmetrics_cv
The following is the access control table for Commvault SQL users:
| Role Name | AppStudioDB | CacheDB | CommServe Computer | CVCloud | DM2 | HistoryDB | ResourceMgrDB | TaskManagerDB | UsageHistoryDB | WFEngine |
|---|---|---|---|---|---|---|---|---|---|---|
| db_cvexecutor (db_datareader and db_datawriter) | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv |
| db_ddladmin | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | sqlexec_cv | NULL | sqlexec_cv | sqlexec_cv | sqlexec_cv |
| db_metricsrole (Select, Execute and UNMASK) | sqlmetrics_cv | NULL | sqlmetrics_cv | sqlmetrics_cv | NULL | sqlmetrics_cv | NULL | NULL | sqlmetrics_cv | sqlmetrics_cv |
| db_owner | NULL | NULL | sqladmin_cv | NULL | NULL | NULL | NULL | sqladmin_cv | NULL | NULL |
| SYSADMIN | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv | sqladmin_cv |
As these accounts are used internally by the Commvault software, you cannot use them to log on to the SQL environment. By default, CVDBCLRLogin account is not password protected but is mapped to an asymmetric key. These SQL accounts cannot be disabled or deleted. Applications and users must not log in directly to the SQL Server database using these accounts. Additionally, no modifications must be made to these SQL user profiles.