# SQL Historian minimum database permissions

**URL:** <https://forum.inductiveautomation.com/t/sql-historian-minimum-database-permissions/116565>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [July 28, 2026, 10:13pm UTC](https://forum.inductiveautomation.com/t/sql-historian-minimum-database-permissions/116565 "2026-07-28T22:13:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kens](https://avatars.discourse-cdn.com/v4/letter/k/0ea827/32.png) [@kens](https://forum.inductiveautomation.com/u/kens)\
**Post date:** [July 28, 2026, 10:13pm UTC](https://forum.inductiveautomation.com/t/sql-historian-minimum-database-permissions/116565/1 "2026-07-28T22:13:03Z")

</div>

When creating an SQL user for SQL Historian, what basic permissions are required?

- SELECT
- INSERT
- UPDATE
- DELETE
- CREATE
- DROP

I assume that, at minimum, we need these in order to add tags and inject our data:

- CREATE
- INSERT
- SELECT

And if Ignition manages partitioning, I assume we also need to be able to purge unused tags and drop partitions:

- DROP
- DELETE

UPDATE doesn't seem applicable, as I'm not aware that Ignition modifies any written data?

Thanks!

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [July 28, 2026, 10:19pm UTC](https://forum.inductiveautomation.com/t/sql-historian-minimum-database-permissions/116565/2 "2026-07-28T22:19:59Z")

</div>

> [@kens](#):
>
> that Ignition modifies any written data?

Metadata.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [July 28, 2026, 10:47pm UTC](https://forum.inductiveautomation.com/t/sql-historian-minimum-database-permissions/116565/3 "2026-07-28T22:47:09Z")

</div>

Yeah, Ignition needs basically full permissions to do all the things it does with the SQL database.  
Rows in `sqlth_partitions`, `sqlth_te` and probably other tables I'm forgetting about will need to be updated over time. If it's a concern, create a dedicated schema/"database" and a specific Ignition user in your DB that only has access there.