<p>Hello, <br /> <br /> I've got two questions referring to <br /> DotNetNuke, I hope someone can <br /> help me by answering my questions. <br /> <br /> <strong>Scenario 1:</strong><br /> When I want to impersonate the<br /> login via the web.config via logging<br /> in with a standard user with following<br /> row in the web.config: <br /> <br /> <identity impersonate="true" userName="<strong>MYDOMAIN\MyUser</strong>" password="<strong>MyPassWord</strong>" /><br /> <strong><br /> Questions:</strong><br /> Due to security I wanted to know what the lowest rights for the User <strong>MYDOMAIN\MyUser</strong> that should<br /> work for impersonation on the Windows-Level.<br /> Is there a difference between the permission that is needed of dnn cms-system on installation and<br /> on running the application without permission errors?<br /> <br /> <strong>Scenario 2:</strong><br /> The second I wanted to ask is about the rights of the SQL-level that are configured in the web.config<br /> in three rows somewhere above the impersonation.<br /> <br /> <strong> Questions:</strong><br /> Due to security I wanted to know what the lowest rights for the in the web.config defined SQL User <br /> would have to be on the SQL-Studio-Authentication-Level.<br /> Does it have be a dbowner to install the dnn cms-system or would lower rights do it?<br /> Does  it have to be a dbowner to run the application without any permission errors?</p>