• Created by Unknown User (anastasia.antonenko), last modified on Nov 07, 2023

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Databases

Indeed Identity PAM uses Microsoft SQL Server or PostgreSQL Pro to store data. The following components require databases:

  • IPAMCore - PAM Core component database is used to store Indeed Identity PAM privileged accounts, resources, permissions, and other service data
  • IPAMCoreJobs - PAM Core component database is used to store scheduled jobs
  • IPAMIdp - IdP component database is used to store authenticators of Indeed Identity PAM users and administrators
  • IPAMIdpJobs - IdP component database is used to store scheduled jobs
  • ILS - Log Server component database is used to store the Indeed Identity PAM events

Database creation

  1. Launch Microsoft SQL Management Studio (SSMS) and connect to Microsoft SQL Server instance
  2. Open the context menu of Databases item
  3. Select the New Database item
  4. Specify a database name, for example IPAMCore, IPAMCoreJobs, IPAMIdP, IPAMIdpJobs, ILS
  5. Click ОK

Creating a service account to work with data storage

  1. Start Microsoft SQL Management Studio (SSMS) and connect to the Microsoft SQL Server instance
  2. Expand the Security item
  3. Open the context menu of Logins item
  4. Select the Create login item
  5. Enter the name, for example IPAMSQLServiceOps
  6. Select SQL Server authentication item and fill in the required fields
  7. Switch to User Mapping item
  8. Check IPAMCore, IPAMCoreJobs, IPAMIdP, IPAMIdPJobs and ILS databases
  9. Check database roles db_owner, db_datareader and db_datawriter
  10. Click ОK

The grants db_owner for Microsoft SQL Server is required only for the first access to the database.

A certificate for the MSSQL instance is required for PAM.

  • No labels