SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


SQLAgentReaderRole enables a user to start/stop the agent service


SQLAgentReaderRole enables a user to start/stop the agent service

Author
Message
AShehzad
AShehzad
Mr or Mrs. 500
Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)

Group: General Forum Members
Points: 576 Visits: 1145
As mentioned in BOL SQLAgentReaderRole members are just able view the list of all available jobs and job schedules and their properties. Surprisingly when i add a user to this role the user is then able to start/stop the SQL Server agent service from SSMS as well as from Configuration manager. Is it expected behavior or some thing is wrong. I did not get any reference that members of SQLAgentReaderRole can manipulate the agent service status. Any feedback on it please?

=============================================================Atif ShehzadDBA Zin Technologies
Koen Verbeeck
Koen Verbeeck
One Orange Chip
One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)

Group: General Forum Members
Points: 27791 Visits: 13268
I don't think this is the expected behaviour.
Are you sure the user doesn't have other permissions?


How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?
My blog at SQLKover.

MCSE Business Intelligence - Microsoft Data Platform MVP
KumarVelayutham
KumarVelayutham
SSC-Enthusiastic
SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)SSC-Enthusiastic (182 reputation)

Group: General Forum Members
Points: 182 Visits: 1338
I guess the user has some other permissions more than SqlAgentReaderrole...Can you double check it?

Regards,
Kumar
AShehzad
AShehzad
Mr or Mrs. 500
Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)Mr or Mrs. 500 (576 reputation)

Group: General Forum Members
Points: 576 Visits: 1145
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.

=============================================================Atif ShehzadDBA Zin Technologies
Koen Verbeeck
Koen Verbeeck
One Orange Chip
One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)One Orange Chip (27K reputation)

Group: General Forum Members
Points: 27791 Visits: 13268
AShehzad (11/26/2013)
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.


I tested it on my machine.
Created SQL user with public server role. Mapped it to a user in MSDB database with public, SQLAgentUserRole and SQLAgentReader role in MSDB and chose MSDB as default database (with dbo as default schema).

I logged in as this user and I could not stop or start SQL Server Agent, as expected.


How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?
My blog at SQLKover.

MCSE Business Intelligence - Microsoft Data Platform MVP
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search