Configuring database security in SQL Server

Privileges for Microsoft SQL Server
To automatically create schemas, tables, and views while you deploy monitor models and enable data movement services, or when you remove a monitor model, grant db_owner authority to the user-specified authentication alias for Monitor_Admin_Database. If the authentication alias that is associated with the Monitor_Admin_Database does not have db_owner authority, you must manually create the database schema to install monitor models and enable data movement services.

Securing the MONITOR database in Microsoft SQL Server
You can enhance security on SQL Server by granting the MONITOR database user only the privileges that are required to access the MONITOR database objects. You can also remove administrative grants from database scripts and place grants on specific database objects that IBM Business Monitor requires.

Securing the COGNOSCS database in Microsoft SQL Server
IBM Cognos® BI requires additional grants to create tables for internal use. After the first successful startup of the IBM Cognos BI server, you can revoke the additional privileges required for table creation for the database user in the IBM Cognos BI content store database.