bulkadmin: This is used for performing BULK INSERT operations, such as when exporting
the Notes Directory, importing TSV files, etc.
dbcreator: This is only required when creating the database.
You don't 'need' to remove it, but you can if you want to.
sysadmin: This is not required but you can use it if you want to.
db_owner: This role is required when performing an upgrade
if the upgrade contains a schema change.
It is also required for bulk insert operations.
NMEAdmin: This role gives you read/write access to all database
tables, and execute permissions on all stored procedures.
NMEReadOnly: This role gives you read access to all database tables.
It allows you to log into the console and view configuration & status
reports, but does not allow you to perform any migration tasks.
For normal migration operations, you need either the db_owner or NMEAdmin role.
- The NMEAdmin role does not grant enough rights to perform
BULK INSERT operations, so some features won't work
that you might not expect, such as editing the members of a user collection.
- We would recommend granting db_owner rights to ensure that all features work as expected.
The account that is used to create the database is automatically granted
db_owner rights, so if you are using that account, no additional database
security level permission changes are necessary.
The migration account needs BOTH the bulkadmin role AND the db_owner role
for all features to work as expected.