We are using keyclaok as container, and mssql server as our database. We provide database user creds to container with that user having default permissions (or permissions inherited from dbowner.)
We want to restrict that dbuser by removing unnecessary databse permissions.
What are minimum permissions required for databse user , so that it will work with keycloak ?
I found one answer on serverfault.com which shows following permissions are required :
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, ALTER, REFERENCES, INDEX, DROP ON `<database>`.* TO `<user>`@`<host>`;
Please check and confirm .