Securing the COGNOSCS database in Microsoft SQL Server

IBM® Cognos® BI requires additional grants to create tables for internal use. After the first successful startup of the IBM Cognos BI server, you can revoke the additional privileges required for table creation for the database user in the IBM Cognos BI content store database.

Procedure

Use the following commands to revoke the additional privileges required for IBM Cognos BI schema creation and allow IBM Cognos BI to operate in a runtime mode with reduced privileges: 
EXEC sp_droprolemember 'db_datawriter', @COG_DB_USER@
GO
EXEC sp_droprolemember 'db_ddladmin', @COG_DB_USER@
GO

For more information about database configuration for IBM Cognos BI on SQL Server, see Suggested Settings for Creating the Content Store in Microsoft SQL Server.

Parent topic: Configuring database security in SQL Server