In situations where a customer wants to assign minimum privileges to a BC user to perform the required daily day to day operations.

The customer wants to give the Business Connect database user the minimum privileges to perform day-to-day activities.

For your BC user, having privileges to perform DML operations will suffice for day-to-day BC operations. However, privileges to perform DDL operations are required in the case of deployment initialization, few protocol plugins, upgrade and migration. This is applicable for relational databases in general.

According to the Business Connect installation documentation :
TIBCO BusinessConnect uses a database to store the audit log, the non repudiation log, the runtime data store, and the configuration store. You can assign these logs/data stores to different databases, or you can use one database for all. The CONNECT and RESOURCE permissions are not granted as default parameters, these two permissions are required to give users when setting up a database.

For run-time operations, the CONNECT and default permissions are sufficient.

All databases except for MySQL are installed according to the corresponding software vendor’s instructions and contain the necessary drivers. All databases users except for MySQL users are supposed to be schema owners.

For more information refer to TIBCO BusinessConnect™ Installation and Configuration : Chapter 2 Installation and Uninstallation : Setting Up Database Information

BusinessConnect, user, permission, database