Results 1 to 5 of 5
  1. #1
    Join Date
    Jan 2004
    Posts
    545
    Provided Answers: 4

    Unanswered: Delegate rights to certain logins

    As a busy DBA/Sysadmin I'd like to be able to delegate some tasks to some of my coworkers:
    - passwordresets for a select group of logins (only for a certain application, no setting rights on objects)
    - killing certain processes

    Is there some way to process these kind of things in some sort of program/cmd-file so that they select the option/action they want to perform, and things get done? They should not be able to log in with the sysadmin-account this program is using in the database and perform all those dreaded commands they don't know about what it does.
    I'm not crazy, I'm an aeroplane!

  2. #2
    Join Date
    Mar 2007
    Posts
    86
    read up on roles ..

  3. #3
    Join Date
    Jan 2004
    Posts
    545
    Provided Answers: 4
    Quote Originally Posted by stuarta
    read up on roles ..
    I know the sso-role can be used for passwordresets and such, but if a person has the sso-role, he can reset mine too, and that should not happen. I want to be able to give him rights to reset passwords for a select group of logins.
    As far as I know, with roles you can only grant select/insert/delete/etc-rights, not specific things like security.
    I'm not crazy, I'm an aeroplane!

  4. #4
    Join Date
    May 2005
    Location
    South Africa
    Posts
    1,365
    Provided Answers: 1
    Maybe you can write your own stored proc that check against a table of valid users then use rob's method to execute the 'sa' commands

  5. #5
    Join Date
    Jan 2004
    Posts
    545
    Provided Answers: 4
    Quote Originally Posted by pdreyer
    Maybe you can write your own stored proc that check against a table of valid users then use rob's method to execute the 'sa' commands
    That was exactly what I was looking for! Thank you very much for pointing me in the right direction!
    I'm not crazy, I'm an aeroplane!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •