Avamar: SQL restore fails with CREATE DATABASE permission denied

During a SQL database restore the following error is returned:

"avsql Error : sqlconnectimpl_smo::execute Microsoft.SqlServer.Management.Common.ExecutionFailureException: An exception occurred while executing a Transact‑SQL statement or batch. ---> System.Data.SqlClient.SqlException: CREATE DATABASE permission denied in database 'master'. RESTORE DATABASE is terminating abnormally."

The Backup Agent service runs under the NT Authority\SYSTEM account by default. This account is not granted the required privileges in SQL Server, so it cannot start CREATE DATABASE statements during a restore operation. Without membership in the sysadmin or dbcreator server roles, the service lacks permission to create a new database in the master catalog, causing the restore to fail.

• Default service account is NT Authority\SYSTEM.
• Account is missing sysadmin or dbcreator role.
• Insufficient rights prevent CREATE DATABASE execution.

Grant the Backup Agent service account the required SQL Server roles:

1. Open SQL Server Management Studio.
2. In Object Explorer, expand the target SQL Server instance and then expand Security → Logins.
3. Locate the account used by the Backup Agent (NT Authority\SYSTEM or a dedicated backup account), right‑click it and select Properties.
4. On the Server Roles page, check sysadmin (or dbcreator) and click OK.