Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


SQLAgentReaderRole enables a user to start/stop the agent service


SQLAgentReaderRole enables a user to start/stop the agent service

Author
Message
AShehzad
AShehzad
SSC-Addicted
SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)

Group: General Forum Members
Points: 442 Visits: 1138
As mentioned in BOL SQLAgentReaderRole members are just able view the list of all available jobs and job schedules and their properties. Surprisingly when i add a user to this role the user is then able to start/stop the SQL Server agent service from SSMS as well as from Configuration manager. Is it expected behavior or some thing is wrong. I did not get any reference that members of SQLAgentReaderRole can manipulate the agent service status. Any feedback on it please?

=============================================================
Atif Shehzad
DBA
Zin Technologies
Koen Verbeeck
Koen Verbeeck
SSCoach
SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)

Group: General Forum Members
Points: 16455 Visits: 13207
I don't think this is the expected behaviour.
Are you sure the user doesn't have other permissions?



How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?

Member of LinkedIn. My blog at SQLKover.

MCSA SQL Server 2012 - MCSE Business Intelligence
KumarVelayutham
KumarVelayutham
SSC-Enthusiastic
SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)SSC-Enthusiastic (109 reputation)

Group: General Forum Members
Points: 109 Visits: 1281
I guess the user has some other permissions more than SqlAgentReaderrole...Can you double check it?

Regards,
Kumar
AShehzad
AShehzad
SSC-Addicted
SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)SSC-Addicted (442 reputation)

Group: General Forum Members
Points: 442 Visits: 1138
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.

=============================================================
Atif Shehzad
DBA
Zin Technologies
Koen Verbeeck
Koen Verbeeck
SSCoach
SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)SSCoach (16K reputation)

Group: General Forum Members
Points: 16455 Visits: 13207
AShehzad (11/26/2013)
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.


I tested it on my machine.
Created SQL user with public server role. Mapped it to a user in MSDB database with public, SQLAgentUserRole and SQLAgentReader role in MSDB and chose MSDB as default database (with dbo as default schema).

I logged in as this user and I could not stop or start SQL Server Agent, as expected.



How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?

Member of LinkedIn. My blog at SQLKover.

MCSA SQL Server 2012 - MCSE Business Intelligence
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search