SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Roles / Permissions for User


Roles / Permissions for User

Author
Message
MSSQL_NOOB
MSSQL_NOOB
SSC Veteran
SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)

Group: General Forum Members
Points: 263 Visits: 173
SQL2008

I have users that will need to
1) run jobs
2) modify and execute SSIS packages
Is there a built-in roles / permissions for that?

I have considered deploying SSIS packages to file system level and allowing users access to that folder (to enable them to modify and execute SSIS packages). Is there any downside / security concerns with this route?
K. Brian Kelley
K. Brian Kelley
Keeper of the Duck
Keeper of the Duck (24K reputation)

Group: Moderators
Points: 24416 Visits: 1917
If you allow access to the file system, realize that the SSIS packages will execute from wherever the dtexec command is given. So if it's given from the user's workstation, that's where it runs. When you use SQL Server Agent jobs, it's running from wherever the SQL Server Agent is running. That's the biggest hump to get over is to understand where the execution is.

For SSIS related roles in msdb, here's an explanation of what each does (from Books Online):

Integration Services Roles (SSIS Service)

K. Brian Kelley
@‌kbriankelley
MSSQL_NOOB
MSSQL_NOOB
SSC Veteran
SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)SSC Veteran (263 reputation)

Group: General Forum Members
Points: 263 Visits: 173
If you allow access to the file system, realize that the SSIS packages will execute from wherever the dtexec command is given. So if it's given from the user's workstation, that's where it runs.


Do you mean if the SSIS package is deployed to a server directory. And the user connects using a UNC path \\servername\foldername; when the user executes the package, is it still running from the user's workstation?

If there's a ftp task on the SSIS package, for example, FTP to say, D drive - does this mean it'll ftp the file to the user's workstation's D drive and not the server's D drive?
K. Brian Kelley
K. Brian Kelley
Keeper of the Duck
Keeper of the Duck (24K reputation)

Group: Moderators
Points: 24416 Visits: 1917
Exactly.

K. Brian Kelley
@‌kbriankelley
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search