Link to home
Start Free TrialLog in
Avatar of SP_2018 .
SP_2018 .Flag for United States of America

asked on

permission to grant to a windows group to edit sql agent jobs created by another user

Hi,

Can someone please advise me how i can grant a windows group  to be able to edit
 sql agent jobs created by a certain user without providing it syadmin permissions.

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Scott Pletcher
Scott Pletcher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
In theory you could set up a stored procedure that called the sp_change_job, and use EXECUTE AS to make it run under a sysadmin user, then just GRANT them execute on just that stored proc, but I've never had any luck getting all that to actually work (or work well).
This can be achieved using the SQLAgentOperatorRole in MSDB.  Refer to the following articles:

Explanations of SQLAgent*Roles
http://msdn.microsoft.com/en-us/library/ms188283.aspx

Configure a user to create and manage SQL Server Agent Jobs
http://msdn.microsoft.com/en-us/library/ms187901.aspx
>> This can be achieved using the SQLAgentOperatorRole in MSDB. <<

Don't think so.  Not to *edit* another users' job(s).
Scott is correct.