SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Stairway to SQL Server Agent - Level 9: Understanding Jobs and Security


Stairway to SQL Server Agent - Level 9: Understanding Jobs and Security

Author
Message
Richard Waymire
Richard Waymire
SSC Veteran
SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)

Group: General Forum Members
Points: 203 Visits: 64
Comments posted to this topic are about the item Stairway to SQL Server Agent - Level 9: Understanding Jobs and Security



george sibbald
george sibbald
SSC-Insane
SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)SSC-Insane (24K reputation)

Group: General Forum Members
Points: 24778 Visits: 13698
I think its worth noting here that even members of SQAgentoperatorRole cannot modify or delete jobs they do not own.

This limitation unfortunately prevents granting the right to someone to fully manage all jobs without granting them sysadmin.

---------------------------------------------------------------------
Richard Waymire
Richard Waymire
SSC Veteran
SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)

Group: General Forum Members
Points: 203 Visits: 64
Yes, unfortunately although these roles exist for the most part you need to be a sysadmin or the job owner to do anything useful.



Dr. Diana Dee
Dr. Diana Dee
Hall of Fame
Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)Hall of Fame (3.4K reputation)

Group: General Forum Members
Points: 3431 Visits: 143
In past versions of SQL Server, the SQL Server Agent service account needed Windows Administrator rights on the local computer in order to successfully restart the service when it stops unexpectedly (because the SQL Server Service would have to be restarted first). Is that still true in SQL Server 2008? 2012?

Thanks.
Richard Waymire
Richard Waymire
SSC Veteran
SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)SSC Veteran (203 reputation)

Group: General Forum Members
Points: 203 Visits: 64
The SQL Server Agent service account will definately need enough rights to restart the service, I just don't know if that's full administrator rights. For some reason this limitation is not mentioned in the considerations for not using an administrative service account in books online.



quackhandle1975
quackhandle1975
SSCarpal Tunnel
SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)SSCarpal Tunnel (4.2K reputation)

Group: General Forum Members
Points: 4220 Visits: 1242
Excellent article, great job.

qh

Who looks outside, dreams; who looks inside, awakes. – Carl Jung.
Robert.Sterbal
Robert.Sterbal
Say Hey Kid
Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)Say Hey Kid (667 reputation)

Group: General Forum Members
Points: 667 Visits: 2000
Would you consider it a defect to have the login change on the service account, but it wouldn't work properly on a restart of the service?

Is there a command line test I can run to see that the Agent is logged in correctly?
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search