SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


SQLAgentReaderRole enables a user to start/stop the agent service


SQLAgentReaderRole enables a user to start/stop the agent service

Author
Message
AShehzad
AShehzad
Ten Centuries
Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)

Group: General Forum Members
Points: 1000 Visits: 1151
As mentioned in BOL SQLAgentReaderRole members are just able view the list of all available jobs and job schedules and their properties. Surprisingly when i add a user to this role the user is then able to start/stop the SQL Server agent service from SSMS as well as from Configuration manager. Is it expected behavior or some thing is wrong. I did not get any reference that members of SQLAgentReaderRole can manipulate the agent service status. Any feedback on it please?

=============================================================Atif ShehzadDBA Zin Technologies
Koen Verbeeck
Koen Verbeeck
SSC Guru
SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)

Group: General Forum Members
Points: 63526 Visits: 13298
I don't think this is the expected behaviour.
Are you sure the user doesn't have other permissions?


How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?
My blog at SQLKover.

MCSE Business Intelligence - Microsoft Data Platform MVP
KumarVelayutham
KumarVelayutham
SSC-Addicted
SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)SSC-Addicted (474 reputation)

Group: General Forum Members
Points: 474 Visits: 1352
I guess the user has some other permissions more than SqlAgentReaderrole...Can you double check it?

Regards,
Kumar
AShehzad
AShehzad
Ten Centuries
Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)Ten Centuries (1,000 reputation)

Group: General Forum Members
Points: 1000 Visits: 1151
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.

=============================================================Atif ShehzadDBA Zin Technologies
Koen Verbeeck
Koen Verbeeck
SSC Guru
SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)SSC Guru (63K reputation)

Group: General Forum Members
Points: 63526 Visits: 13298
AShehzad (11/26/2013)
I have created a new login with public server role. Just added it SQLAgentReaderRole in msdb. Again i am able to start/stop the agent with this login. So could any one confirm this on his machine as well please.


I tested it on my machine.
Created SQL user with public server role. Mapped it to a user in MSDB database with public, SQLAgentUserRole and SQLAgentReader role in MSDB and chose MSDB as default database (with dbo as default schema).

I logged in as this user and I could not stop or start SQL Server Agent, as expected.


How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?
My blog at SQLKover.

MCSE Business Intelligence - Microsoft Data Platform MVP
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search