Hi everyone,
As per our security policies, sysadmin role will be removed from our OSADMIN, OSRUNTIME, OSLOG users from configuration tool. Is there any major impact if the sysadmin role is removed from the above mentioned users?
Hello,None of those users require the sysadmin role, it is only needed during the initial platform installation if you want Configuration Tool to do the changes on the database server for the platform setup.OSADMIN requires the db_accessadmin, db_datareader, db_datawriter, db_ddladmin and db_securityadmin roles.OSRUNTIME only needs lower privileges, db_datareader and db_datawriter.
You can find more detailed information here, although some of it is outdated:https://www.outsystems.com/forums/discussion/5866/how-to-outsystems-platform-database-users/
You can also check the scripts generated by Configuration Tool to run on the database server to check the permissions assigned to each user.