yes Jeff. you are right. I know i cant give SYSADMIN to some one else.. its just because the operators don't really have good understanding about sql. I grant this sysadmin in order to execute xp_cmdshell to create log file.

Well, in the end i found another way to create log file without having to grant SYSADMIN to a user

thanks for warning me anyway... 🙂