Kofax Capture database permissions

The following database permissions are needed when installing, upgrading, or using the Kofax database with a full SQL server:


  • During installation, Kofax Capture (with “Create new database” selected) creates the SQL Server database. Therefore, the database login used during installation must be a member of the db_owner role, and it requires permissions to create a database.
  • During Kofax software upgrades and service pack installations, the database login must be a member of the db_owner role.
  • For everyday Kofax Capture use, the database login does not need to be a member of the db_owner role but must have read, write, & execute database permissions.
  • The Kofax database logon can be configured using SQL server authentication or Windows authentication. 
  • When using SQL server authentication, only the account specified within the Kofax Capture Database Utility (dbutil.exe) needs to have access to the Kofax database.
  • When using Windows authentication, all Kofax users need to have access to the Kofax database (including Kofax service accounts).  This can be accomplished by adding each user account or by adding the user's AD group to the SQL server and database permissions.