Red Gate forums :: View topic - Minimum permissions for SQL Response users
Return to www.red-gate.com RSS Feed Available

Search  | Usergroups |  Profile |  Messages |  Log in  Register 
Go to product documentation
SQL Response 1
SQL Response 1 forum

Minimum permissions for SQL Response users

Search in SQL Response 1 forum
Post new topic   Reply to topic
Jump to:  
Author Message
wilcoxs



Joined: 27 May 2009
Posts: 2
Location: London, UK

PostPosted: Wed May 27, 2009 6:56 pm    Post subject: Minimum permissions for SQL Response users Reply with quote

I may have missed this in the docs and on the forums but what are the minimum permissions I need to give to an SQL user and a Windows user to allow SQL Response to operate correctly ?

The docs all seem to use SA accounts but that seems a bit too open.

I guess the SQL user will have additional requirements if we want to run SQL Profile Traces too. Please could someone let me know what these are.

Many thanks in advance,

Simon.
Back to top
View user's profile Send private message
Linda Hawksworth



Joined: 25 Jun 2007
Posts: 192

PostPosted: Mon Jun 01, 2009 12:50 pm    Post subject: Reply with quote

Please see the following document regarding permissions for SQL Response:

http://www.red-gate.com/support/Knowledgebase/SQL_Response/SQL_Response_Security_Setup.pdf
Back to top
View user's profile Send private message
wilcoxs



Joined: 27 May 2009
Posts: 2
Location: London, UK

PostPosted: Mon Jun 01, 2009 1:09 pm    Post subject: Thanks. Reply with quote

Thank you, that was just what I needed. I'm sure I'd read that document but must have missed the relevant piece.

Many thanks,

Simon.
Back to top
View user's profile Send private message
wclemmer



Joined: 01 Dec 2009
Posts: 3

PostPosted: Mon Jan 11, 2010 4:41 pm    Post subject: Response needs SQL monitor account to have SYSADMIN rights? Reply with quote

If I'm reading this correctly, it still says that the account used to log in to every monitored SQL Server must have SYSADMIN privileges. This can't really be true since I'm fairly certain that Response doesn't actually need to add/drop databases to be able to monitor a server, for example. It's also against (at least) my company's security policy (and common sense) to grant a service account SA rights, or to use the SA account as a service account.

While we're at it, the Windows account on the Repository server doesn't really need full Administrator rights either, does it? Just to run the service? I'm sure there's a specific set of rights that's really required but difficult to define/support? And the SQL Server account on that server? Obviously it doesn't really require full sysadmin rights either, especially after installation?

I'm assuming that at some point one of your developers wrote the scripts that would create the SQL Server Roles and Windows rights with exactly the privileges required for Response to work, but it proved too unwieldy to support.

Could you post those scripts please? Very Happy
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic All times are GMT + 1 Hour
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group