Creating the administrator users and connection in SQL Server for the Reviewer workspace

Creating the administrator geodatabase users

You can choose to add users to an enterprise geodatabase in SQL Server through Microsoft SQL Server Management Studio. The geodatabase users are underlying enterprise database users and store the Reviewer feature classes and tables. You need to grant the appropriate permissions.

Learn how to add Windows-authenticated users or groups to a SQL Server database

Learn how to add database-authenticated users to a SQL Server database

For Reviewer workspace administrators, the following is suggested:

User type	Role	SQL Server permissions
Data Creator	CONNECT	CREATE TABLE CREATE VIEW CREATE PROCEDURE

Administrator permissions

The following scripts can be used in Microsoft SQL Server Management Studio to create a new database user to store the Reviewer feature classes and tables, and grant the appropriate permissions.

Create user and schema:

USE REVDB
GO
EXEC sp_addlogin N'rev', 'rev', @logindb, @loginlang
GO 
CREATE USER [rev] FOR LOGIN [rev]
GO
CREATE SCHEMA [rev] AUTHORIZATION [rev]
GO
ALTER USER [rev] WITH DEFAULT_SCHEMA=[rev]
GO

Grant privileges:

USE REVDB
GO
EXEC sp_droprolemember 'gis_data_creator', 'rev'
GO
EXEC sp_droprole 'gis_data_creator'
GO
CREATE ROLE gis_data_creator AUTHORIZATION dbo
GO
GRANT CREATE TABLE TO gis_data_creator
GO
GRANT CREATE PROCEDURE TO gis_data_creator
GO
GRANT CREATE VIEW TO gis_data_creator
GO
EXEC sp_addrolemember 'gis_data_creator', 'rev'
GO

Verify roles:

EXEC sp_helprolemember 'gis_data_creator'
GO

Verify role permissions:

select dp.NAME AS principal_name,
 dp.type_desc AS principal_type_desc,
 o.NAME AS object_name,
 p.permission_name,
 p.state_desc AS permission_state_desc 
 from sys.database_permissions p
 left OUTER JOIN sys.all_objects o
 on p.major_id = o.OBJECT_ID
 inner JOIN sys.database_principals dp
 on p.grantee_principal_id = dp.principal_id
 where dp.NAME = 'gis_data_creator'
GO

Verify user permissions:

select USER_NAME(p.grantee_principal_id) AS principal_name,
 dp.type_desc AS principal_type_desc,
 p.class_desc,
 OBJECT_NAME(p.major_id) AS object_name,
 p.permission_name,
 p.state_desc AS permission_state_desc 
from sys.database_permissions p
inner JOIN sys.database_principals dp
on p.grantee_principal_id = dp.principal_id
where USER_NAME(p.grantee_principal_id) = 'rev'

Associate Login rev with User rev:

USE REVDB
GO
EXEC sp_change_users_login 'update_one','rev','rev'
GO
EXEC sp_helpuser 'rev'

Creating the administrator database connection

You need to create an administrator database connection when the Reviewer workspace is stored in an enterprise geodatabase. Create a database connection in ArcCatalog with the REV user; this will be the Reviewer workspace location.

Learn more about database connections in ArcGIS for Desktop.