Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

VIEW SERVER STATE Permissions Expand / Collapse
Author
Message
Posted Monday, October 11, 2010 3:04 PM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Tuesday, November 18, 2014 10:21 AM
Points: 102, Visits: 747
I can try and figure this out manually, but does anyone know on what DMVs VIEW SERVER STATE grants permissions?

I am in a position where I need to grant VIEW SERVER STATE permissions to some folks and then explicitly deny SELECT perms on the DMVs they do not need. So, the question becomes, what DMVs are granted SELECT when granted VIEW SERVER STATE.
Post #1002451
Posted Monday, October 11, 2010 3:30 PM
SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Today @ 10:21 AM
Points: 5,886, Visits: 13,042
what you have described will work. see

http://msdn.microsoft.com/en-us/library/ms188754(v=SQL.100).aspx


---------------------------------------------------------------------

Post #1002468
Posted Monday, October 11, 2010 3:34 PM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Tuesday, November 18, 2014 10:21 AM
Points: 102, Visits: 747
george sibbald (10/11/2010)
what you have described will work. see

http://msdn.microsoft.com/en-us/library/ms188754(v=SQL.100).aspx


I am confident it will work. I was just hoping there was a pre-existing list of what DMVs a user was granted perms too when given VIEW SERVER STATE. Then i can work backwards and make sure I DENY SELECT on the appropriate objects.

I want to avoid having to do this (determining the perm difference between VIEW SERVER STATE and not) manually if i can.
Post #1002471
Posted Monday, October 11, 2010 4:05 PM
SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Today @ 10:21 AM
Points: 5,886, Visits: 13,042
The URL states that view server state AND select permission is required, so grant view server state and select only on the dmvs you want them to be able to use.

Is that what you require?



---------------------------------------------------------------------

Post #1002485
Posted Tuesday, October 12, 2010 10:06 AM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: 2 days ago @ 10:24 AM
Points: 1,865, Visits: 3,620
You may have already seen this link, but here it is; it describes an alternative way to what you are trying to do, and complications that come with it:

http://www.eggheadcafe.com/software/aspnet/30323724/how-can-i-see-what-permissions-view-server-state-has.aspx


__________________________________________________________________________________

Turbocharge Your Database Maintenance With Service Broker: Part 2
Turbocharge Your Database Maintenance With Service Broker: Part 1
Real-Time Tracking of Tempdb Utilization Through Reporting Services
Monitoring Database Blocking Through SCOM 2007 Custom Rules and Alerts
Preparing for the Unthinkable - a Disaster/Recovery Implementation
Post #1002975
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse