Issue:

When running a Vault Backup using Autodesk Data Management Server Console (ADMS) or backup scripts, permission denied error appear in the ADMS Console log or backup log.

<datestamp> Backing Up Databases... 0/8
<datestamp> Connectivity.Application.VaultManager.ServiceException: BACKUP DATABASE permission denied in database '<databasename>'.
BACKUP DATABASE is terminating abnormally. ---> System.Data.SqlClient.SqlException: BACKUP DATABASE permission denied in database '<databasename>'.
BACKUP DATABASE is terminating abnormally.
   ..

Restore of a Vault backup fails with the message:

CREATE DATABASE permission denied in database 'master'. RESTORE FILELIST is terminating abnormally.

vault server console with error message create database permission denied in database master restore filelist is terminating abnormally.

Causes:

There are potentially multiple causes of this behaviour. Known causes include:

Admin Ownership resides on a subscriber.
AUTODESKVAULT SQL instance was not configured correctly following the guidelines in the online help
It has been modified in an unsupported manner.

Solution:

Check that the SA account configured when Vault was installed is enabled and still has Sysadmin role assigned
Check that the VaultSys account is configured per the guide here.
Try detaching and attaching the erroring database in Autodesk Data Management Server Console (ADMS), and retry the backup operation.
Test manually creating a backup of the database from SQL management studio by logging in using the SA account configured when Vault server was installed.
If Step 1 or 2 do not work, review the permissions in both SQL and Window OS by following these steps:

Log into the AUTODESKVAULT SQL instance as a user with System Administrator privileges.
Expand "Databases".
Right-click the database in question and select "Properties".
Select the "Permissions" page.
Check the "ADMS-hostname" account does not Deny permission to "Backup database".

Check the permissions in Window Server:
1. In Windows Explorer, navigate to the folder containing the database files. (.mdf and .ldf files).
  - Note: The default location of these files is in this folder:- C:\Program Files\Microsoft SQL Server\MSSQLxx.AUTODESKVAULT\MSSQL\DATA.
  - Contact the server administrator if the location of the files has been changed and cannot be found.
2. Right-click both the .mdf and .ldf file and select "Properties".
3. Compare the "Groups or user names" and their subsequent "Permissions" are consistent (the same) with a database that is working (for example the KnowledgeVaultMaster). Note: The user name or group may be different than that shown in this image.

Also, click the "Advanced" and compare the "Owner" set for the file.

Notes:

Check all the SQL server and Window server machine if replication involved.
If the database is replicated, it is not possible to detach it unless unreplicate database from every subscriber. Read more about at How to unreplicate a Vault database and re-enable it in the ADMS Console.
Attaching the database from the ADMS Console automatically set the correct Windows and SQL permissions on the database.
Attaching a Vault database triggers a File Validation for every file in the FileStore and detaching a database from the Console is not deleted the database.
If reattaching the databases in ADMS does correct the permissions, backup the databases using SQL Management Studio followed by uninstalling and reinstalling the SQL Instance.

See Also:

Products:

Vault Basic; Vault Professional; Vault Workgroup;