the Alfresco users should own the database and have all permissions relevant to DDL / DML operations. For normal operations, permissions for DML would suffice, but upgrades require DDL pivileges as Alfresco actively patches the schema when starting up a new version for the first time.