Solved

sa vs sysadmin

Posted on 2010-09-13
19
1,045 Views
Last Modified: 2012-05-10
are both these the same or 2 different things in SQL Server?

Thanks
0
Comment
Question by:anushahanna
  • 10
  • 7
  • 2
19 Comments
 
LVL 60

Expert Comment

by:chapmandew
ID: 33661637
same thing.
0
 
LVL 23

Expert Comment

by:Racim BOUDJAKDJI
ID: 33661644
sa is a login, meaning that it can establish a connection to the server AND that login has sysadmin level of priviledge.  sysadmin is a server level priviledge that allows any login which has it do pretty much anything no the server.  You may create a login with sysadmin priviledge that is different from sa.  sa is the just the default sysadmin of the server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33661748
OK. so sa does not have anything to do with 'service account', right?
0
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

 
LVL 60

Expert Comment

by:chapmandew
ID: 33661765
functionally, they do the same thing.  Racimo is correct in terms of login vs group

No, neither have anything to do with service accounts.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662085
OK- the reason I ask is this:

I use the following SP to change the owner of the job to sa - this is the default sysadmin login that Racimo mentioned, right?
EXEC MSDB.dbo.sp_update_job @job_name = 'JobName', @owner_login_name = 'sa'

but in auditing i see that the account that ran the job was 'NT AUTHORITY\NETWORK SERVICE'. this is actually the service account on which SQL Server was started and is running on.

that is why i asked about the connection between sa (sysadmin) and sa (service/start account)..

can you see why it may shift like the above?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662095
I am assuming that the network service account is a member of the sysadmin group, right?
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662288
sysjobs also shows the job having sa as the owner of the job.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662290
these are the sysadmins in the server

sa
BUILTIN\Administrators
NT AUTHORITY\SYSTEM
2 Local Users
1 Domain User
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662296
>>I am assuming that the network service account is a member of the sysadmin group

you want to check who is listed under BUILTIN\Administrators?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662314
So, NT AUTHORITY\SYSTEM is a sysadmin.  What user runs the SQLAgent service?

Can find this by running services.msc
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662419
NT AUTHORITY\NetworkService
runs both SQL and Agent Service.
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662444
I suspected.  That is why you're seeing that account as running the job.  
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662556
so service account of Agent will override the owner of a job at any time?
0
 
LVL 60

Accepted Solution

by:
chapmandew earned 250 total points
ID: 33662626
In this case, they are the same thing.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662665
>>In this case, they are the same thing.

in every case, right?

->even if we gave a diff user here:
EXEC MSDB.dbo.sp_update_job @job_name = 'JobName', @owner_login_name = 'Tim'

it still would override and default to the service account of the agent?
0
 
LVL 60

Expert Comment

by:chapmandew
ID: 33662711
Good question.  My guess is that the service account would still show...but there is only one way to find out. :)
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33662996
OK. I tried-I added a test login called Tim, added the same as user in the DB with read/write/exec (what is needed within the job), and the job has finished executing as Tim.
how do you understand that, in relation to our discussion?
0
 
LVL 23

Assisted Solution

by:Racim BOUDJAKDJI
Racim BOUDJAKDJI earned 250 total points
ID: 33663379
<<OK. so sa does not have anything to do with 'service account', right?>>
As the name says, a service account is an account related to the OS rather than a sa which is exclusively related to SQL.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33663426
>>As the name says, a service account is an account related to the OS rather than a sa which is exclusively related to SQL.

thanks for the clarification, Racimo.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction In my previous article (http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/SSIS/A_9150-Loading-XML-Using-SSIS.html) I showed you how the XML Source component can be used to load XML files into a SQL Server database, us…
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question