Microsoft Provisioning Framework (MPF) has four types of SQL Server databases:
This is the audit log database that stores historical transaction data for performance analysis and other reporting purposes.
This is the configuration database that stores run-time properties for provisioning components, namespace definitions for providers and procedures, and user credentials.
This is the transaction log database that stores the current state of all executing transactions running in provisioning engines.
This is the Resource Manager database that stores resource management configuration data for resources and consumers, as well as transaction handling data.
In SQL, permissions to select (read) and write to database tables and stored procedures is granted by role. Databases typically have multiple roles to support users with different sets of access permissions. To access an MPF database, the calling user must satisfy two conditions:
Groups are assigned to roles using SQL Enterprise Manager. The following table lists the default MPF database roles, the databases with which they are associated, and the groups assigned to the role. Using Enterprise Manager, however, you can change the roles for a database as well as the members and permissions for a role.
Roles | Databases | Permissions | Groups |
---|---|---|---|
MPFAdminRole | All | Full permissions to all tables and stored procedures | MPFAdmins |
MPFAuditorRole | MPFAudit | Read (select) access to audit data | MPFAuditors |
MPFServiceRole | All | Write access to the MPFAudit and MPFTranLogData database and
read access to MPFConfig to fetch stored procedures
Note
|
MPFServiceAccts |
MPFClientRole | MPFConfig | Read access to client properties. | MPFClientAccts |