What level of access should be enabled for the database user accounts?

The db_owner role grants full control over the database, which RSA Archer requires to create and modify schema objects, manage stored procedures, and perform all necessary data operations during installation and ongoing use. Without this elevated role, Archer cannot complete schema upgrades or execute certain administrative database tasks. This is an explicit requirement documented in the Archer installation prerequisites.

db_datawriter only allows INSERT, UPDATE, and DELETE operations, which is insufficient because Archer also needs DDL permissions to create and alter schema objects.

db_accessadmin only manages database access permissions and cannot grant the data manipulation or schema rights Archer requires.

db_securityadmin manages security-level permissions such as logins and roles but does not provide the data access or schema modification rights Archer needs.