Re: Am I doing this right?



A deny for a sysadmin won't do anything. Members of the
sysadmin role bypass security checks - sysadmins are able to
do anything on the server and in any databases.

-Sue

On Thu, 18 May 2006 11:41:03 -0700, Steve
<Steve@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I have a new user that will eventually be another admin on our SQL Server 200
installation. I want to give him permission to stop and Restart Scheduled
jobs, yet not have permission to insert/update or delete in specific
databases until he gets more experience. The only predefined server role
that allows access to scheduled jobs is SystemAdministrator, but that also
gives permissions everywhere to everything.

Will creating a User in each database I want to protect based on his login,
and then selecting db_denydatawriter do what I want to do, or will the also
selected SystemAdministrator priviledge override this altogether?

.



Relevant Pages

  • Re: SQL Server and Agent Accounts
    ... I log in to the server as a sysadmin. ... Here is a scenario that I tested: I created a Windows account called ... Apparently when SQL Agent logs in to the publisher it uses Domain\Maer. ...
    (microsoft.public.sqlserver.replication)
  • Re: Web server in CE 5.0 using ISAPI extensions
    ... SysAdmin is actually implemented as an ISAPI extension. ... resolve the problem of the file download (show the file name ... efficent way to realize a web server on CE. ...
    (microsoft.public.windowsce.app.development)
  • Re: The clock is running down on OS X "security"
    ... lets see how many security "experts" on this forum will continue ... Windows file sharing on an Internet server? ... So, Michelle, where do you work as a sysadmin? ... I agree with you that any sysadmin that is worth a flip should be keeping up with current patches, ...
    (comp.sys.mac.advocacy)
  • Re: xp_cmdshell
    ... When xp_cmdshell is invoked by a user who is a member of the sysadmin fixed ... which the SQL Server service is running. ... Set the "Non sysadmin job step proxy account ... > I have a user and I want to to give persmission of that user to execute ...
    (microsoft.public.sqlserver.clients)
  • Re: MCSA 2000 to MCSE 2003
    ... Of course I have looked at the Microsoft site concerning ... > certification. ... >> 2003 server. ... >> experience as a SysAdmin, I feel very sorry for whoever hires you. ...
    (microsoft.public.cert.exam.mcsa)