The OnBase database should be created with a database user account that will never be deleted (for example, the sa database user account), rather than an Active Directory account, to ensure perpetual access to the db_owner role's capabilities. This account does not need to be used for general application connectivity.
The database user that will be used for initial database creation must have the following privileges:
-
The ALTER ANY LOGIN privilege.
Note:The ALTER ANY LOGIN privilege is not required when using a contained database.
-
The db_owner privilege on the OnBase database.