Post reply

create a role for "alter trace" permission?

  • January 4, 2011 at 12:10 pm

    #231654

    i do not want to grant "alter trace" directly to a login, is there some way I can create a role called "traceAdmins" and grant the role this permission?

  • January 7, 2011 at 5:40 pm

    #1270995

    It appears that you can only grant this Permission to a Login or a Server role.

    If you want to use a role, you cannot create new Server roles so you would have to use one of the existing Server roles.

    If you try grant the permission to a user database role I got:

    'Msg 4621, Level 16, State 10, Line 1

    Permissions at the server scope can only be granted when the current database is master'

    If you create a database role in the master database and try assigning the permission I got:

    'Msg 15151, Level 16, State 1, Line 1

    Cannot find the login 'traceAdmin', because it does not exist or you do not have permission.'

    If you are using Windows Authentication, possibly use a Windows Security Group and give the Permission to the security group and add domain users to security group.

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply