Page 1 of 2 12 LastLast
Results 1 to 15 of 17

Thread: Security!!

  1. #1
    Join Date
    Aug 2002
    Location
    Charlotte NC
    Posts
    665

    Unanswered: Security!!

    For the life of me I cant seem to figure this out. Im sure its simple. What security rights do I need to give an end user so that jobs that he scheduals run?
    Jim

  2. #2
    Join Date
    Jun 2003
    Location
    Ohio
    Posts
    149

    Re: Security!!

    I dont thik the user needs any special permissions for the SQL Server to run the scheduled jobs. If the user is able to schedule jobs, they should be run by SQL Server. If there is anything else, I am curious too ....

    Originally posted by JDionne
    For the life of me I cant seem to figure this out. Im sure its simple. What security rights do I need to give an end user so that jobs that he scheduals run?
    Jim

  3. #3
    Join Date
    Aug 2002
    Location
    Charlotte NC
    Posts
    665

    Re: Security!!

    Originally posted by sbaru
    I dont thik the user needs any special permissions for the SQL Server to run the scheduled jobs. If the user is able to schedule jobs, they should be run by SQL Server. If there is anything else, I am curious too ....
    well then that means I have another poblem....Ill investigate a bit more
    Jim

  4. #4
    Join Date
    Nov 2002
    Location
    Jersey
    Posts
    10,322

    Re: Security!!

    Originally posted by JDionne
    well then that means I have another poblem....Ill investigate a bit more
    Jim
    Yeah, like why are you allowing users to schedule jobs in the first place...

    [yoda]
    Control, you must learn control
    [/yoda]
    Brett
    8-)

    It's a Great Day for America everybody!

    dbforums Yak CorralRadio 'Rita
    dbForums Member List
    I'm Good Once as I ever was

    The physical order of data in a database has no meaning.

  5. #5
    Join Date
    Aug 2002
    Location
    Charlotte NC
    Posts
    665

    Re: Security!!

    Originally posted by Brett Kaiser
    Yeah, like why are you allowing users to schedule jobs in the first place...

    [yoda]
    Control, you must learn control
    [/yoda]
    he is the owner of the db he is in, not the server. I dont want to give him rights to the server just his db.
    Jim

  6. #6
    Join Date
    Feb 2002
    Posts
    2,232
    Check to see what user is being used as the SQL Agent Proxy Account - all users who are not part of the sa role use this account when running jobs. So this account probably does not have the appropriate permissions.

  7. #7
    Join Date
    Feb 2002
    Posts
    2,232
    Are you running ss2k or ss7 ? If it is ss7 then change the user to SQLAgentCmdExec.

  8. #8
    Join Date
    Jun 2003
    Location
    Ohio
    Posts
    149
    rnealejr-

    I still dont get it. How does it matter, under which account SQL Server Agent runs? If a user can create a job and if atleast any one SQL job in the instance runs, all the jobs should run. I dont think there will be a owner for the jobs apart from the account under which SQL Server Agent runs.

  9. #9
    Join Date
    Feb 2002
    Posts
    2,232
    For jobs, there are 2 accounts that are used. 1 for jobs whose owner belongs to the sys admin roles and 1 for all others.

  10. #10
    Join Date
    Jul 2003
    Location
    Penang, Malaysia
    Posts
    212
    I'm also looking to security management of jobs and dts, can u point me to any reference on the net or books online for this?

    thanks.
    Patrick Chua
    LBMS ( Learn By My Self) NPQ ( No paper Qualification )

  11. #11
    Join Date
    Feb 2002
    Posts
    2,232
    Here is a link that should help:

    link

  12. #12
    Join Date
    Aug 2002
    Location
    Charlotte NC
    Posts
    665
    Originally posted by rnealejr
    Are you running ss2k or ss7 ? If it is ss7 then change the user to SQLAgentCmdExec.
    What do you mean change the user to sqlagentcmdexec?
    Jim

  13. #13
    Join Date
    Feb 2002
    Posts
    2,232
    For non-sa accounts:

    SS7 uses the SQLAgentCmdExec account to run the job.
    SS2K uses the SQL Agent Proxy account to run the job.

    Just make sure that these accounts have the appropriate db and windows permissions.

  14. #14
    Join Date
    Aug 2002
    Location
    Charlotte NC
    Posts
    665
    Originally posted by rnealejr
    For non-sa accounts:

    SS7 uses the SQLAgentCmdExec account to run the job.
    SS2K uses the SQL Agent Proxy account to run the job.

    Just make sure that these accounts have the appropriate db and windows permissions.
    I dont see that user in my security/login section. Am I looking in the wrong place?
    Jim

  15. #15
    Join Date
    Feb 2002
    Posts
    2,232
    Right-click on SQL Server Agent -> Properties -> Job System -> Non-SysAdmin job step proxy account.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •