IBM Support

Guardium Entitlement Report is Missing Some MS SQL Data

Troubleshooting


Problem

IBM Security Guardium Database Entitlement Reports return fewer results than expected, or specific expected results are missing from the result set.

Cause

If the DB user does not have permission to view entitlement metadata, Microsoft SQL Server does not throw an error. It returns an empty result set or a partial result set showing only the permitted data.

Diagnosing The Problem

Guardium queries MS SQL Server as the data source.
The data source connections work.
No errors are written in the MS SQL logs or the Guardium debug log. The entitlement query appears to work.
Some results might be returned, but some are missing.

Resolving The Problem

Give the MS SQL user account Guardium uses for the data source connection all the permissions listed in the Guardium documentation for Database Entitlement Reports.
In at least one case, the user account also required security admin permission to pull all the expected data.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0aAAC","label":"DATA MISSING"}],"ARM Case Number":"TS013449381","Platform":[{"code":"PF033","label":"Windows"}],"Version":"All Versions"}]

Document Information

Modified date:
19 October 2023

UID

ibm17056153