SSIS Package Credentials

SQLServerCentral is supported by Red Gate Software Ltd.

Popular Topics

Home

Members

Calendar

Who's On

Home » Article Discussions » Article Discussions by Author » Discuss Content Posted by Robert Pearl » SSIS Package Credentials

12 posts, Page 2 of 2

««1 2

SSIS Package Credentials

Rate Topic

Display Mode

Topic Options

Author

Message

thierry.vandurme

Posted Friday, December 11, 2009 2:23 AM

Mr or Mrs. 500

Group: General Forum Members
Last Login: 2 days ago @ 2:48 AM
Points: 583, Visits: 287

I'm missing some things here (principal, job owner, ...). I doubt this (and the link to the summary on codeproject) is the recommended way if you want it to be "totally" secure (if that's ever possible).

The articles grant sysadmin and all MSDB roles. What for? This is way too much (in most cases). Plus, you are assigning all 3 msdb roles. You don't want this login to see ALL jobs, right? They should only see their own jobs. Check BOL and see that these roles follow a hierarchy (the most privileged one includes the permission from the other two). It's like people assigning a login the sysadmin server role AND the securityadmin role. The first one already includes all privileges...

You should be assigning a principal (needs only the public server role) access to the proxy, run the job step under the proxy, set the job owner to the SQL login, grant only the SQLAgentUserRole msdb role to the SQL login, set appropriate permissions on the dtsx file and folder it resides in, ...

We did it like this and it works fine. It needs a lot of work and maintenance though.

Post #832770

m--S3qU3L

Posted Tuesday, July 20, 2010 4:44 AM

SSC Veteran

Group: General Forum Members
Last Login: Monday, November 19, 2012 11:30 PM
Points: 290, Visits: 713

Hi,

I have a doubt regarding the final article ('How to Schedule and Run a SSIS Package job') mentioned in this article.

Why do we need to give sysadmin server role to the 'executor login' as the whole concept of proxy account is for executing job for under priviledged logins.

Please could any one clarify?

Thanks in advance

John

Post #955421

« Prev Topic | Next Topic »

12 posts, Page 2 of 2

««1 2

Permissions