InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comTue, 18 Jun 2013 01:05:49 GMT20http://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxAll I need now is to not allow updates to existing jobs Any ideas?[code="sql"]USE msdb;CREATE ROLE JobsViewer AUTHORIZATION db_securityadmin;GOuse msdbEXECUTE sp_addrolemember 'JobsViewer', 'johntest1'DENY EXECUTE ON OBJECT::msdb.dbo.sp_add_job TO JobsViewerDENY EXECUTE ON OBJECT::msdb.dbo.sp_add_jobserver TO JobsViewerDENY EXECUTE ON OBJECT::msdb.dbo.sp_add_jobstep TO JobsViewerDENY EXECUTE ON OBJECT::msdb.dbo.sp_update_job TO JobsViewerDENY EXECUTE ON OBJECT::msdb.dbo.sp_add_jobschedule TO JobsViewerDENY EXECUTE ON OBJECT::msdb.dbo.sp_delete_job TO JobsViewer[/code]Thu, 15 Nov 2012 08:07:32 GMTjcmcgovernhttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxGrant the SQLAgentReaderRole and set the job owner to a different user. That way, users can only see the jobs, but cannot start/stop/modify them.Wed, 14 Nov 2012 17:24:52 GMTspaghettidbahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxAll these look great. But how can I deny users execute, update, delete.... and only have viewing of the jobs?Wed, 14 Nov 2012 16:14:49 GMTjcmcgovernhttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxIt's explained in detail in the BOL page I posted.SQLAgentReaderRole has some more privileges than SQLAgentUserRole.Mon, 05 Jul 2010 01:06:36 GMTspaghettidbahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxOk.I configured it to SQLAgentReader Role.and do you think we have any major difference betweenSQLAgentUserRole and SQLAgentReaderFri, 02 Jul 2010 15:03:35 GMTstriker-babahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxSQLAgentUserRole is the least privileged of the SQL Server Agent fixed database roles.It still can start/stop jobs, but owned ones only.Fri, 02 Jul 2010 10:26:12 GMTspaghettidbahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxOk. I just need viewable permissions on the sql agent.So, what role would be the best to grant least permissionsso that user can only be able to view the sql server agent and cannot make any changes to other jobs or schedules.Fri, 02 Jul 2010 09:58:08 GMTstriker-babahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxYou have to be member of some fixed database roles in msdb to see sql agent.See here:[url]http://msdn.microsoft.com/en-us/library/ms188283.aspx[/url]Fri, 02 Jul 2010 08:55:28 GMTspaghettidbahttp://www.sqlservercentral.com/Forums/Topic946862-110-1.aspxHi all,I am not able to see the sql server agent.But, when I login as a sysadmin I am able to see.Can anyone help me on how to provide read access to sql server agentso that when I logon as a datareader I need to be able to view SQLserver agent.Only read or view permissions.Thanks .Fri, 02 Jul 2010 08:32:54 GMTstriker-baba