What acces should be given to DBA admin in SQL 2005 server?

Hi,


I need to give rights acces to a DBA admin group to SQL 2005 server on Windows 2003. I'm not familiar with this kind of acces.
Which rights should I give to let them able to manage the databases? Should I give them also acces on server?

What's the usual system admin does for this kind of request? Is there any proceadure that I can follow?

Thanks.
LVL 1
SAM2009Asked:
Who is Participating?
 
Leon FesterSenior Solutions ArchitectCommented:
Yes, the sysadmin role gives them the highest possible access levels to the database.
Have a quick read through the following links to get a better understanding of Security in SQL Server.

Discusses granting rights on a SQL server.
http://www.databasejournal.com/features/mssql/article.php/3713116/SQL-Server-Security-Model.htm

List of builtin security groups and roles and the relevant access levels:
http://vyaskn.tripod.com/sql_server_security_best_practices.htm
0
 
Leon FesterSenior Solutions ArchitectCommented:
The DBA's technically only need access to the SQL database, however they may need to perform server operator or backup operator tasks, so you could consider using those builtin security groups.

They definitely don't need to be Domain Admins...
0
 
jogosCommented:
For example ; check eventviewer, perfmon, ...
Does your dba not have to install and configure SQL?
When your database has connection or I/O problems who is supposed to look find that problem?

... if your dba has not access to the server someone else must be given that full responsability and dba cannot even assist.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
SAM2009Author Commented:
DBA team will manage all databases on that server then should I give them "sysadmin server role " in SQL security?
0
 
SAM2009Author Commented:
If I give them local admin access in the Windows 2003  server should they be able to do everything even on SQL databases?
0
 
sjurusCommented:
Sometimes the DBA needs to stop, start, restart SQL Server services to do so requires a local administrator
0
 
Leon FesterSenior Solutions ArchitectCommented:
SQL Server and Windows Server permissions are controlled seperately.
Adding a user to the Windows Administrator group does not implicitly give that user SQL Server admin rights.

Here are some tips sent to answer a similar question:
http://www.mssqltips.com/sqlservertip/1282/assigning-dba-rights-in-sql-server/
0
 
SAM2009Author Commented:
Many thanks for links!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.