# SQL Database Roles

> The CMS_Admin, CMS_Sync, CMS_User_Writer, and CMS_User_Reader SQL roles that the Setup Wizard creates.

Source: https://docs.capaone.com/capainstaller/installation-and-maintenance/database-settings-and-maintenance/sql-database-roles/  
Product: CapaInstaller — a separate CapaSystems product; do not apply this page to any other.

# Introduction

This document will explain the CapaInstaller SQL Database roles CMS\_Admin, CMS\_Sync, CMS\_User\_Writer, and CMS\_User\_Reader. These SQL Database roles are created from the Setup Wizard and are created to make it easy to give a user or computer login the proper permissions to elements in the SQL database.

**Below is each of the server CapaInstaller SQL Database roles explained.**

|                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
|:------------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **Element**       | **Description**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| CMS\_Admin        | This role is for logins used for Admins in the CapaInstaller Console and Management Portal. It could be the administrator of the CapaInstaller installation.                                                                                                                                                                                                                                                                                                                                                                                           |
| CMS\_Sync         | This role is for logins for Services. It could be the [Synchronization Service](/capainstaller/the-capainstaller-console/system-administration/what-is-system-administration/services/synchronization-service/), [Front-end Service](/capainstaller/the-capainstaller-console/system-administration/what-is-system-administration/services/front-end-service/), or [Patch Management Service](/capainstaller/the-capainstaller-console/system-administration/what-is-system-administration/services/patch-management-service/). |
| CMS\_User\_Writer | This role is for logins used by users in the CapaInstaller Console, where the user should have permission to write changes to the database.                                                                                                                                                                                                                                                                                                                                                                                                            |
| CMS\_User\_Reader | This role is for logins used by users in the CapaInstaller Console, where the user should only have permission to read from the database.                                                                                                                                                                                                                                                                                                                                                                                                              |

These SQL Database roles cannot be used as the only SQL Security on the SQL Server. You still need to set up permissions on your users and login

To add a user to a role, giving permission from the role to the user, you can use the following SQL query. ALTER ROLE \[Role name\] ADD MEMBER \[username\].

|                                                    |                                                                                                                              |
|:---------------------------------------------------|:-----------------------------------------------------------------------------------------------------------------------------|
| **If you want to...**                              | **You can...**                                                                                                               |
| Learn about needed permissions to run Setup Wizard | [SQL Server Permission configuration for Setup Wizard](/capainstaller/installation-and-maintenance/database-settings-and-maintenance/sql-server-permission-configuration-for-setup-wizard/). |
| Read more about SQL Roles                          | [Go to MSDN](https://msdn.microsoft.com/en-us/library/ms189121(v=sql.130).aspx)                                              |