Help with SQL Agent Security

From: Ray Higdon (rayhigdon_at_higdonconsulting.com)
Date: 06/12/03

  • Next message: Bronek Kozicki: "Re: Restricting access to NT administrators group"
    Date: Thu, 12 Jun 2003 02:35:31 -0700
    
    

    If you have them in targetserversrole and a data reader
    of MSDB, they should be able to see the history and
    status.

    HTH

    Ray Higdon MCSE, MCDBA, CCNA

    >-----Original Message-----
    >Hi,
    >
    >I want to be able to allow certain users to see SQL
    Agent
    >jobs. Whilst I am aware that all I need to do is add
    >them to the 'TargetServersRole', this does not allow
    them
    >to see the status of any jobs. This is because when
    they
    >look at the jobs, sp_get_composite_job_info runs a check
    >to see if they are sysadmin before running
    >xp_sqlagent_enum_jobs. If they aren't sysadmin the
    >status just gets returned as not running (4).
    >
    >Is there a way round this?
    >
    >Thanks!
    >
    >Ben
    >.
    >


  • Next message: Bronek Kozicki: "Re: Restricting access to NT administrators group"

    Relevant Pages

    • Re: Windows Group Access to SQL Scheduled Tasks - SQL 2000
      ... The permissions for TargetServersRole have ... adding my Windows group as a member allowed full enumeration of the SQL jobs. ... on several procs allows the target users full access to all ... is implicitly changed to this user, while the actual owner field in the job ...
      (microsoft.public.sqlserver.security)
    • Re: SQL Server Jobs - permissions for non-owners
      ... Russell Fields wrote in message ... > rights to looks at all jobs and job history. ... > in TargetServersRole cannot create or modify jobs. ...
      (microsoft.public.sqlserver.server)
    • Re: How Someone Can View Jobs in EM That He Does Not Own
      ... Yes, that works, but the downside is that a member of TargetServersRole ... >>he does not own any of the jobs. ... >>The MSDN Library says you can modify jobs if you're given ...
      (microsoft.public.sqlserver.security)
    • Re: SA Security
      ... You can allow them to see jobs (definition and history) by adding them to ... the TargetServersRole in the msdb database. ...
      (microsoft.public.sqlserver.security)