Hello,
We've a Microsoft Dynamics 2009 NAV R2, based on a Role tailored environment.
I've a question concerning SQL Server access rights assignment.
The external consultant who did installation insists that in order to grant a specific user the necessary rights to create a user within NAV, the operator must have at least SecurityAdmin rights at server level and db_owner + db_accessadmin for the NAV_DB and master db_accessadmin.
this kind of procedure seems rather odd and dangerous especially if we consider that the securityAdmin role applies as well to all other DBs in the server.
Personally I would have expected the Classic Client to be able to impersonate a user (i.e.: the user that runs the NAV service) to create/delete/modify users.
I found this document that seems to confirm the database level access rights: http://msdn.microsoft.com/en-us/library/dd568727
although it doesn't mention anything for SecurityAdmin.
do you have a final answer on this topic? any official document?
Thanks,
Roberto.
