Post-installation tasks for Microsoft Azure

Low privileged login for any account that runs the PI SQL Data Access Server RTQP requires the db_AFQueryEngine role. This login should not be granted higher privilege than that. We recommend that you revoke the db_owner or Administrator role for that account.

1. To add the db_AFQueryEngine role:

   ALTER ROLE db_AFQueryEngine ADD MEMBER <accounty_running_the_service>

2. To revoke the db_owner role:

   ALTER ROLE db_owner DROP MEMBER <account_used_in_the_setup>