Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Minimum privileges Expand / Collapse
Author
Message
Posted Tuesday, June 11, 2013 12:37 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Tuesday, June 11, 2013 1:35 PM
Points: 6, Visits: 29
SQL2000

What are the minimum privileges / permissions / database roles needed to grant a user (besides granting sysadmin) to:
1) Create and run DTS packages.
2) Create, run and review job history.

For #1: I am guessing DB_DATAREADER and DB_DATAWRITER to MSDB??
For #2: I'm not sure about granting MASTER db.

What is the minimum I should grant?

Thanks.
Post #1462325
Posted Sunday, January 26, 2014 2:37 PM
SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: 2 days ago @ 7:57 AM
Points: 40, Visits: 609
Always use the fixed roles of MSDB instead of granting permissions directly.
I believe for job controlling from the SQL Agent you need sysadmin permissions.

Oops I see I am in the SQL 2000 forum. These roles didn't exists back then.


__________________
MS-SQL / SSIS / SSRS junkie
Visit my blog at dba60k.net
Post #1534821
Posted Sunday, January 26, 2014 8:35 PM


SSC-Forever

SSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-ForeverSSC-Forever

Group: General Forum Members
Last Login: Today @ 4:15 PM
Points: 42,082, Visits: 39,476
asdsfssd (6/11/2013)
SQL2000

What are the minimum privileges / permissions / database roles needed to grant a user (besides granting sysadmin) to:
1) Create and run DTS packages.
2) Create, run and review job history.

For #1: I am guessing DB_DATAREADER and DB_DATAWRITER to MSDB??
For #2: I'm not sure about granting MASTER db.

What is the minimum I should grant?

Thanks.


I'm pretty sure that, in SQL Server 2000, only SA privs will fit the bill here.


--Jeff Moden
"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

Helpful Links:
How to post code problems
How to post performance problems
Post #1534842
Posted Friday, September 25, 2015 7:26 AM


SSC-Dedicated

SSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-DedicatedSSC-Dedicated

Group: Administrators
Last Login: Today @ 10:07 AM
Points: 34,375, Visits: 18,597
I think, searching memory here, that you could get SELECT privileges to the job tables and grant them. However that might mean the person could only query.

As far as DTS, I'm not sure you can allow packages to be saved from the designers without SA. Maybe you could try creating a role in msdb and assigning permissions to syspackages and see. I don't have an instance to test, but I would start there. The permissions structure was more manipulable in earlier versions, but I'm not sure if it was 2000 that hardened this, or 2005.

However, Jeff might be right here. There were few fine grained controls in 2000.







Follow me on Twitter: @way0utwest

Forum Etiquette: How to post data/code on a forum to get the best help
Post #1722962
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse