App Control requires make the following permissions are granted to the “App Control” user:

  1. “App Control” user has to be set as db_owner on Das database.
  2. Following server-level permissions should be granted in order to allow diagnostic collection:

Permission

Required

Reason

VIEW SERVER STATE

Yes

Allows collection of App Control performance statistics

VIEW ANY DEFINITION

Yes

Allows collection of App Control performance statistics

ALTER TRACE

Yes

Allows collection of on-demand SQL trace for performance diagnostics

ALTER SERVER STATE

No (Recommended)

Allows server to reset performance counters on daily basis, and provides better performance diagnostics

Note:

Even in shared environments, App Control Server requires sysadmin permission during the time of server installation. After installation is complete, sysadmin permission can be taken away.