Solved

sa vs sysadmin

Posted on 2010-09-13
19
882 Views
Last Modified: 2012-05-10
are both these the same or 2 different things in SQL Server?

Thanks
0
Comment
Question by:anushahanna
  • 10
  • 7
  • 2
19 Comments
 
LVL 60

Expert Comment

by:chapmandew
ID: 33661637
same thing.
0
 
LVL 23

Expert Comment

by:Racim BOUDJAKDJI
ID: 33661644
sa is a login, meaning that it can establish a connection to the server AND that login has sysadmin level of priviledge.  sysadmin is a server level priviledge that allows any login which has it do pretty much anything no the server.  You may create a login with sysadmin priviledge that is different from sa.  sa is the just the default sysadmin of the server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33661748
OK. so sa does not have anything to do with 'service account', right?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33661765
functionally, they do the same thing.  Racimo is correct in terms of login vs group

No, neither have anything to do with service accounts.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662085
OK- the reason I ask is this:

I use the following SP to change the owner of the job to sa - this is the default sysadmin login that Racimo mentioned, right?
EXEC MSDB.dbo.sp_update_job @job_name = 'JobName', @owner_login_name = 'sa'

but in auditing i see that the account that ran the job was 'NT AUTHORITY\NETWORK SERVICE'. this is actually the service account on which SQL Server was started and is running on.

that is why i asked about the connection between sa (sysadmin) and sa (service/start account)..

can you see why it may shift like the above?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662095
I am assuming that the network service account is a member of the sysadmin group, right?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662288
sysjobs also shows the job having sa as the owner of the job.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662290
these are the sysadmins in the server

sa
BUILTIN\Administrators
NT AUTHORITY\SYSTEM
2 Local Users
1 Domain User
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662296
>>I am assuming that the network service account is a member of the sysadmin group

you want to check who is listed under BUILTIN\Administrators?
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 60

Expert Comment

by:chapmandew
ID: 33662314
So, NT AUTHORITY\SYSTEM is a sysadmin.  What user runs the SQLAgent service?

Can find this by running services.msc
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662419
NT AUTHORITY\NetworkService
runs both SQL and Agent Service.
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662444
I suspected.  That is why you're seeing that account as running the job.  
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662556
so service account of Agent will override the owner of a job at any time?
0
 
LVL 60

Accepted Solution

by:
chapmandew earned 250 total points
ID: 33662626
In this case, they are the same thing.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662665
>>In this case, they are the same thing.

in every case, right?

->even if we gave a diff user here:
EXEC MSDB.dbo.sp_update_job @job_name = 'JobName', @owner_login_name = 'Tim'

it still would override and default to the service account of the agent?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662711
Good question.  My guess is that the service account would still show...but there is only one way to find out. :)
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662996
OK. I tried-I added a test login called Tim, added the same as user in the DB with read/write/exec (what is needed within the job), and the job has finished executing as Tim.
how do you understand that, in relation to our discussion?
0
 
LVL 23

Assisted Solution

by:Racim BOUDJAKDJI
Racim BOUDJAKDJI earned 250 total points
ID: 33663379
<<OK. so sa does not have anything to do with 'service account', right?>>
As the name says, a service account is an account related to the OS rather than a sa which is exclusively related to SQL.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33663426
>>As the name says, a service account is an account related to the OS rather than a sa which is exclusively related to SQL.

thanks for the clarification, Racimo.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Let's review the features of new SQL Server 2012 (Denali CTP3). It listed as below: PERCENT_RANK(): PERCENT_RANK() function will returns the percentage value of rank of the values among its group. PERCENT_RANK() function value always in be…
This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
Using examples as well as descriptions, and references to Books Online, show the documentation available for datatypes, explain the available data types and show how data can be passed into and out of variables.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now