I have 20+ databases on the SQL Cluster. How can I give a user the permission to backup any database without giving sysadmin access ?
I dont want to make the user dbo on all databases either.BACKUP DATABASE and BACKUP LOG permissions default to members of the sysadmin fixed server role and the db_owner and db_backupoperator fixed database roles.
If not you could take advantage to EXECUTE AS in this case.|||thanks Satya. I was hoping in SQL 2005, may be they had come up with something better. The only problem with db_backupoperator approach is that every time you add a new database to the server, thethe id needs to be given access to that database.
Showing posts with label role. Show all posts
Showing posts with label role. Show all posts
Monday, March 19, 2012
Wednesday, March 7, 2012
backup and restore role
I need to restrict somebody to do only the backup and restore over a
database. What server role and database permissions I should give to this
user?
Regards
FeiGive db_owner permissions to this specific database. With db_owner
permissions the user will be able to backup and restore this database.
However, it the database being restore does not exist, this user will
require CREATE DATABASE permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"Fei" wrote:
> I need to restrict somebody to do only the backup and restore over a
> database. What server role and database permissions I should give to this
> user?
> Regards
> Fei|||Thank you. What server role should I give? I just tried to a restore with
"server administrator" and "db_owner" on the database, I got the permission
denied msg.
Fei
"Ben Nevarez" wrote:
[vbcol=seagreen]
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
>|||The information I sent below is for SQL Server 2005. In SQL Server 2000
db_owner do not have RESTORE permissions.
Also, in both SQL Server 2000 and 2005, the fixed database role
db_backupoperator has BACKUP but not RESTORE permissions.
Hope this helps,
Ben Nevarez, MCDBA, OCP
Database Administrator
"Ben Nevarez" wrote:
[vbcol=seagreen]
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
>
database. What server role and database permissions I should give to this
user?
Regards
FeiGive db_owner permissions to this specific database. With db_owner
permissions the user will be able to backup and restore this database.
However, it the database being restore does not exist, this user will
require CREATE DATABASE permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"Fei" wrote:
> I need to restrict somebody to do only the backup and restore over a
> database. What server role and database permissions I should give to this
> user?
> Regards
> Fei|||Thank you. What server role should I give? I just tried to a restore with
"server administrator" and "db_owner" on the database, I got the permission
denied msg.
Fei
"Ben Nevarez" wrote:
[vbcol=seagreen]
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
>|||The information I sent below is for SQL Server 2005. In SQL Server 2000
db_owner do not have RESTORE permissions.
Also, in both SQL Server 2000 and 2005, the fixed database role
db_backupoperator has BACKUP but not RESTORE permissions.
Hope this helps,
Ben Nevarez, MCDBA, OCP
Database Administrator
"Ben Nevarez" wrote:
[vbcol=seagreen]
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
>
backup and restore role
I need to restrict somebody to do only the backup and restore over a
database. What server role and database permissions I should give to this
user?
Regards
FeiGive db_owner permissions to this specific database. With db_owner
permissions the user will be able to backup and restore this database.
However, it the database being restore does not exist, this user will
require CREATE DATABASE permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"Fei" wrote:
> I need to restrict somebody to do only the backup and restore over a
> database. What server role and database permissions I should give to this
> user?
> Regards
> Fei|||Thank you. What server role should I give? I just tried to a restore with
"server administrator" and "db_owner" on the database, I got the permission
denied msg.
Fei
"Ben Nevarez" wrote:
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
> > I need to restrict somebody to do only the backup and restore over a
> > database. What server role and database permissions I should give to this
> > user?
> >
> > Regards
> >
> > Fei|||The information I sent below is for SQL Server 2005. In SQL Server 2000
db_owner do not have RESTORE permissions.
Also, in both SQL Server 2000 and 2005, the fixed database role
db_backupoperator has BACKUP but not RESTORE permissions.
Hope this helps,
Ben Nevarez, MCDBA, OCP
Database Administrator
"Ben Nevarez" wrote:
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
> > I need to restrict somebody to do only the backup and restore over a
> > database. What server role and database permissions I should give to this
> > user?
> >
> > Regards
> >
> > Fei
database. What server role and database permissions I should give to this
user?
Regards
FeiGive db_owner permissions to this specific database. With db_owner
permissions the user will be able to backup and restore this database.
However, it the database being restore does not exist, this user will
require CREATE DATABASE permissions.
Ben Nevarez, MCDBA, OCP
Database Administrator
"Fei" wrote:
> I need to restrict somebody to do only the backup and restore over a
> database. What server role and database permissions I should give to this
> user?
> Regards
> Fei|||Thank you. What server role should I give? I just tried to a restore with
"server administrator" and "db_owner" on the database, I got the permission
denied msg.
Fei
"Ben Nevarez" wrote:
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
> > I need to restrict somebody to do only the backup and restore over a
> > database. What server role and database permissions I should give to this
> > user?
> >
> > Regards
> >
> > Fei|||The information I sent below is for SQL Server 2005. In SQL Server 2000
db_owner do not have RESTORE permissions.
Also, in both SQL Server 2000 and 2005, the fixed database role
db_backupoperator has BACKUP but not RESTORE permissions.
Hope this helps,
Ben Nevarez, MCDBA, OCP
Database Administrator
"Ben Nevarez" wrote:
> Give db_owner permissions to this specific database. With db_owner
> permissions the user will be able to backup and restore this database.
> However, it the database being restore does not exist, this user will
> require CREATE DATABASE permissions.
> Ben Nevarez, MCDBA, OCP
> Database Administrator
>
> "Fei" wrote:
> > I need to restrict somebody to do only the backup and restore over a
> > database. What server role and database permissions I should give to this
> > user?
> >
> > Regards
> >
> > Fei
Friday, February 24, 2012
Backup and Job view and execute permissions
Can you please help me to identify which roles or permissions i need to grant
to a user to do the following task without assigning sysadmin role?
1. View and execute SQL Jobs
2. View backup device and its contents
I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
required permission to perform the above operation.Using TargetServerRole isn't a documented approach - the
permissions for this role depend on what service pack you
are on.
To view and execute jobs, the user needs to be the job owner
or a member of sysadmins.
Viewing contents of a device executes a restore headeronly
which any user can execute.
-Sue
On Fri, 21 Oct 2005 08:41:05 -0700, "RumulusKyle"
<RumulusKyle@.discussions.microsoft.com> wrote:
>Can you please help me to identify which roles or permissions i need to grant
>to a user to do the following task without assigning sysadmin role?
>1. View and execute SQL Jobs
>2. View backup device and its contents
>I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
>required permission to perform the above operation.|||Thanks Sue. :)
"Sue Hoegemeier" wrote:
> Using TargetServerRole isn't a documented approach - the
> permissions for this role depend on what service pack you
> are on.
> To view and execute jobs, the user needs to be the job owner
> or a member of sysadmins.
> Viewing contents of a device executes a restore headeronly
> which any user can execute.
> -Sue
> On Fri, 21 Oct 2005 08:41:05 -0700, "RumulusKyle"
> <RumulusKyle@.discussions.microsoft.com> wrote:
> >Can you please help me to identify which roles or permissions i need to grant
> >to a user to do the following task without assigning sysadmin role?
> >
> >1. View and execute SQL Jobs
> >2. View backup device and its contents
> >
> >I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
> >required permission to perform the above operation.
>
to a user to do the following task without assigning sysadmin role?
1. View and execute SQL Jobs
2. View backup device and its contents
I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
required permission to perform the above operation.Using TargetServerRole isn't a documented approach - the
permissions for this role depend on what service pack you
are on.
To view and execute jobs, the user needs to be the job owner
or a member of sysadmins.
Viewing contents of a device executes a restore headeronly
which any user can execute.
-Sue
On Fri, 21 Oct 2005 08:41:05 -0700, "RumulusKyle"
<RumulusKyle@.discussions.microsoft.com> wrote:
>Can you please help me to identify which roles or permissions i need to grant
>to a user to do the following task without assigning sysadmin role?
>1. View and execute SQL Jobs
>2. View backup device and its contents
>I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
>required permission to perform the above operation.|||Thanks Sue. :)
"Sue Hoegemeier" wrote:
> Using TargetServerRole isn't a documented approach - the
> permissions for this role depend on what service pack you
> are on.
> To view and execute jobs, the user needs to be the job owner
> or a member of sysadmins.
> Viewing contents of a device executes a restore headeronly
> which any user can execute.
> -Sue
> On Fri, 21 Oct 2005 08:41:05 -0700, "RumulusKyle"
> <RumulusKyle@.discussions.microsoft.com> wrote:
> >Can you please help me to identify which roles or permissions i need to grant
> >to a user to do the following task without assigning sysadmin role?
> >
> >1. View and execute SQL Jobs
> >2. View backup device and its contents
> >
> >I assigned 'TargetServerRole' role in msdb to a user but it didn't meet the
> >required permission to perform the above operation.
>
Subscribe to:
Posts (Atom)