Adding the SeSecurityPrivilege privilege to the user account (for SQL Server of SMB shares)

The domain user account used for installing the SQL server must be assigned the "SeSecurityPrivilege" privilege to perform certain actions on the CIFS server that require privileges not assigned by default to domain users.

Before you begin

The domain account used for installing the SQL Server must already exist.

About this task

When adding the privilege to the SQL Server installer's account, Data ONTAP might validate the account by contacting the domain controller. The command might fail if Data ONTAP cannot contact the domain controller.

Steps

Add the "SeSecurityPrivilege" privilege: vserver cifs users-and-groups privilege add-privilege -vserver vserver_name -user-or-group-name account_name -privileges SeSecurityPrivilege
The value for the -user-or-group-name parameter is the name of the domain user account used for installing the SQL Server.
Verify that the privilege is applied to the account: vserver cifs users-and-groups privilege show -vserver vserver_name -user-or-group-name account_name

Example

The following command adds the "SeSecurityPrivilege" privilege to the SQL Server installer's account in the EXAMPLE domain for Storage Virtual Machine (SVM) vs1:

cluster1::> vserver cifs users-and-groups privilege add-privilege -vserver vs1 -user-or-group-name EXAMPLE\SQLinstaller -privileges SeSecurityPrivilege

cluster1::> vserver cifs users-and-groups privilege show -vserver vs1
Vserver   User or Group Name          Privileges
--------- ---------------------       ---------------
vs1       EXAMPLE\SQLinstaller        SeSecurityPrivilege