?
Solved

rights to execute single sql server2008  job

Posted on 2011-02-18
5
Medium Priority
?
797 Views
Last Modified: 2012-05-11
Have a user - he doesn’t have sysadmin rights, only process admin, doing testing, needs rights to execute a single job. I didn’t want him to have access and rights to other jobs or more rights than needed. He is only a data reader for an associated user database
So, can I grant the user rights to execute a single sql server job? How can i do this
0
Comment
Question by:sqlserverdba
  • 3
  • 2
5 Comments
 
LVL 40

Accepted Solution

by:
lcohan earned 2000 total points
ID: 34928248
If he's the owner then he can see it without having to be sysadmin:

How to: Give Others Ownership of a Job (SQL Server Management Studio)
http://msdn.microsoft.com/en-us/library/ms178031.aspx
0
 
LVL 1

Author Comment

by:sqlserverdba
ID: 34929197
because he doesn't have enough rights, he cannot see the sql agent and the jobs. the only rights he has is process admin at server level and data reader for a user database.
0
 
LVL 40

Assisted Solution

by:lcohan
lcohan earned 2000 total points
ID: 34929606
If user cant see agent there are other ways to start a job - i.e sp_start_job
http://msdn.microsoft.com/en-us/library/ms186757.aspx

By default, members of the sysadmin fixed server role can execute this stored procedure. Other users must be granted one of the following SQL Server Agent fixed database roles in the msdb database:

SQLAgentUserRole
SQLAgentReaderRole
SQLAgentOperatorRole
0
 
LVL 1

Author Comment

by:sqlserverdba
ID: 34929838
yes, but the problem is agentreader role doesnt help starting the job

agentuser role helps to see and start the job when the person has been assigned ownership but still the
job fails with the message "Non-SysAdmins have been denied permission to run
DTS Execution job steps without a proxy account.  The step failed."


agentoperatorrole gives permissions on starting, modifying other jobs
0
 
LVL 40

Assisted Solution

by:lcohan
lcohan earned 2000 total points
ID: 34929922
Sorry is hard sometimes to advice without the whole picture/details and I believe that you need to create a proxy account in that case as per documentation "Creating SQL Server Agent Proxies"

http://msdn.microsoft.com/en-us/library/ms189064.aspx

http://msdn.microsoft.com/en-us/library/ms188763.aspx
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Naughty Me. While I was changing the database name from DB1 to DB_PROD1 (yep it's not real database name ^v^), I changed the database name and notified my application fellows that I did it. They turn on the application, and everything is working. A …
In this article I will describe the Copy Database Wizard method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question