April 9, 2011 at 1:46 pm
We have a ssis package job running under a system account.
In the ssis it calls a stored procedure. the Stored procedure is to select and update some data in a couple of tables in a database. My question is what permission needs to be assigned to the system account.
I know for sure db owner will work. but we don't want to give this account too much permissions that the job not needed.
So for this case, shall I Only need to grant the account excute on that stored procedure?
DO I also need to give it database reader permission since it uses select in the stored procedure?
Do I also need to grant it database writer permission since it uses update in the stored procedure?
Thanks
April 10, 2011 at 2:55 am
\you are correct: you only need to grant EXECUTE on the stored procedure; your user does not need any access to the objects the procedure might use or manipulate.
There is no need to grant additional permissions, unless the user also needs to access the other objects outside of that stored procedure..you know...do they run SELECTS on the tables, or only access via procedures?
Lowell
April 10, 2011 at 3:21 am
Thank you, it helps a lot.
Can I find this any where documented in SQL book online, would like to find more details.
Viewing 3 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply