RE: SQL Server Roles

From: ChrisW (ChrisW_at_discussions.microsoft.com)
Date: 03/03/05

  • Next message: Clifford Heath: "Re: Security and access rights using local and global groups" 
    Date: Thu, 3 Mar 2005 02:25:03 -0800

    Thanks John, that helped.

    Delving a little deeper, we are attempting to avoid the use of 'sysadmin',
    however, this authority is required to perform basic tasks such as viewing
    SQL Server Agent Jobs. We hoped to be able to build a new fixed server role
    containing the selected 'sysadmin' privileges that a DBA requires but from
    what I've read it's not possible to do this or amend existing fixed server
    roles. Is this correct? If not, how it can be done?

    "John Bell" wrote:

    > Hi
    >
    > I don't think these are SQL Server fixed server or database roles For a list
    > see
    >
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_6ndx.asp
    >
    > and sp_helpdbfixedrole
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sp_help_5omd.asp
    >
    > If they were, you could use sp_dbfixedrolepermission
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sp_addp_4boy.asp to see what the permissions are
    >
    > To add a user to a fixed server role see sp_addsrvrolemember
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sp_addp_0n1u.asp
    >
    > If you want to add a user to a role use sp_addrolemember
    > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sp_addp_4boy.asp
    >
    > John
    >
    >
    >
    >
    > "ChrisW" wrote:
    >
    > > Where can I find details of the split in SQL Server fixed servers roles
    > > between CDBA and DDBA. I want to maintain a segregation of duties between
    > > the two and am looking for a standard / simple way to achieve this.

  • Next message: Clifford Heath: "Re: Security and access rights using local and global groups"

    Relevant Pages

    • Re: how to: non-admin user sending email from a SP ?
      ... Check out using XPSMTP for sending emails from inside of SQL Server. ... All you would have to do then is grant the appropriate people permission ... > states that "Only members of the sysadmin fixed server role can run ...
      (microsoft.public.sqlserver.programming)
    • Re: Difference between Server and System Administrators
      ... Lookup "serveradmin fixed server role" in BooksOnLine. ... Andrew J. Kelly SQL MVP ... > Administrator and System Administrator roles in SQL server. ...
      (microsoft.public.sqlserver.security)
    • RE: SBS 2003 Unable to connect to database STS_Config
      ... Uninstall the SQL server from the SBS 2k3 server from add/remove programs ... Uninstall Microsoft SQL Server Desktop Engine (SHAREPOINT) ... If AV software install any extra IIS virtual directory, ...
      (microsoft.public.windows.server.sbs)
    • Re: Memory issues with 64-bit SQL Server 2005 on 64-bit Win 2003 C
      ... I also checked the individual patch levels for the .NET drivers, SQL Server ... The SQL Server is fully patched, however Windows Update reported that the OS ... Lock pages in memory -- I guess you might have taken care of it as well. ...
      (microsoft.public.sqlserver.clustering)
    • RE: migrating from wmsde to sql server
      ... Click Start, point to All Programs\Microsoft SQL Server, and then click ... then click New SQL Server Registration. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    Loading