Do I need to give sys_admin privilege to any users in the database?

It does not seems to be required, please suggest.

Also, apart from the MTSUser (COM user), is there any other user for which I need to give access to the database sever (Deployer/Web)?

List of users need access in database and roles, this is what I am looking for, I am also going through documents available, any suggestion is mostly welcome.

2 Answers 2


Only one user needs database access, and that's the "TCMDBUSER" account. The MTSUser account does not need any database permissions.

In Tridion CM in 2011, you'll have just one user account (default: TCMDBUSER) and in CD you may have multiple users depending on number of databases. None of these users is a "Tridion user", they're purely DB users.

You will need one account with some special privileges (SA in SQL Server, "Tridion_Sys" in Oracle) to create the database, but this user account is not needed anymore once the database is created.

In SQL Server, the TCMDBUSER account only needs Data_Reader and Data_Writer roles, IIRC.

  • Just one query, TCMDBUSER will require SA privilege in sql sever. Can you please let me know why and what is actually role/responsibility of this user? Feb 20, 2014 at 13:39
  • It does not require SA. It requires SA login to be created (and to create the databases), but the TCMDBUSER account is not an SA.
    – Nuno Linhares
    Feb 20, 2014 at 13:44

In Addition to Nuno's Answar, you may need 'tcmlogdbuser' a Database account for the Logging database.

for more details, here is the Summary of Tridion user accounts(Login Required) and Content Manager databases security settings (Login Required).

  • 1
    Just FYI, but starting Tridion 2013 there will be no more Tridion_cm_log DB. Thus, tcmlogdbuser will no longer exist as well
    – Robert Jin
    Feb 20, 2014 at 21:08
  • Yes, here it is 2011, I am aware of this and many thanks to all for the information. Feb 21, 2014 at 6:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.