Return
-
Title
"CREATE DATABASE permission denied in database 'master'" when attempting to create Active Roles Synchronization Service database -
Description
When attempting to create the configuration and/or sync databases for the Active Roles Synchronization Service, the operation fails with the error:
CREATE DATABASE permission denied in database 'master'
The Active Roles Synchronization Service service account has the dbcreator role in Microsoft SQL Server. -
Cause
The Active Roles Synchronization Service configuration wizard is run under the security context of the account that is logged into the Active Roles Synchronization Service host.
The account being used to run the Active Roles Synchronization Service configuration wizard does not have the dbcreator role. -
Resolution
Either:
Log into the Active Roles Synchronization Service host as the Active Roles Synchronization Service account
OR
Execute the Active Roles Synchronization Service Console as the Active Roles Synchronization Service service account using RUN-AS
OR
Grant the account that is running the Active Roles Synchronization Service configuration wizard the dbcreator role in Microsoft SQL Server