Solved

SQL server Database Mail Error-SQL Server 2008 R2

Posted on 2016-09-29
11
49 Views
Last Modified: 2016-10-22
Hi there,
  I am receiving the following error when i try to run the Agent Job which tries to send an email.

Executed as user: UserXXX. The EXECUTE permission was denied on the object 'sp_send_dbmail', database 'msdb', schema 'dbo'. [SQLSTATE 42000] (Error 229).  The step failed.

Just for the test purpose, I have assigned the user-UserXXX to sysadmin privileges but still no luck.

I am running the job step Advanced->"Run as user -UserXXX' to execute this Job.

I have manually added the user UserXXX to the msdb database role 'DatabaseMailUserRole' also.

Have checked the sp_send_dbmail has the grant permission and the GranteeName- 'DatabaseMailUserRole'

Please let me know how to solve this issue?

thanks
Deepak
0
Comment
Question by:Deepak Kumar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 41821302
Did you enable the Database Mail?
You can check that by running the following command:
exec sp_configure 'Database Mail XPs'

Open in new window

0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 41821308
If isn't enabled you can enable it by using the Database Mail Configuration Wizard:
DatabaseMailConfigure.PNG
0
 

Author Comment

by:Deepak Kumar
ID: 41821330
Hi Vitor,
Thank you for your reply! When i ran the exec sp_configure 'Database Mail XPs'.I got the output.

name      minimum      maximum      config_value      run_value
Database Mail XPs      0      1      1      1

Please Note: Already database mail is working for other jobs which sends the DB mail.
I have configured this job to run as different User-UserXXX  using Advanced option in Job steps, because of this, I am getting this error.

thanks
Deepak
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 41821346
Already database mail is working for other jobs which sends the DB mail.
What this job has different from the others? Only the user? The way it's sending emails? Other things?
0
 

Author Comment

by:Deepak Kumar
ID: 41821359
The user has been changed -"Run as user" and Job Owner "to different user which again has sysadmin privileges".
0
 

Author Comment

by:Deepak Kumar
ID: 41823244
Hi Vitor,
  I have executed this command which was found in forum , after which the job was executed as the user which i gave in "Run as user"

GRANT EXECUTE ON object::sp_send_dbmail TO DatabaseMailUserRole.

but i have few questions on the internal calls by SQL server when the db mail job had happened.

EXEC @rc = msdb.dbo.sysmail_verify_profile_sp
EXEC @retValue = sp_SendMailMessage @contract_name, @message_type, @message_data
EXEC @rc = sp_SendMailQueues @sendmailxml
EXEC @rc = msdb.dbo.sysmail_help_configure_value_sp @parameter_name = N'DatabaseMailExeMinimumLifeTime',
EXEC msdb.dbo.sysmail_help_configure_value_sp @parameter_name = N'ReadFromConfigurationFile',
                                                  @parameter_value = @parameter_value OUTPUT

Few of the above mentioned queries were captured in SQL profiler where the Login Name still shows as 'SA'

I have made the job owner to other user and also the run as "different user" but still i can see the internal queries were executed as 'SA'

Can you tell if i disable the 'SA' login what would the Login Name for this internal calls as opposed to 'SA' now?

thanks
Deepak
0
 
LVL 50

Assisted Solution

by:Vitor Montalvão
Vitor Montalvão earned 500 total points
ID: 41823257
Those are undocumented stored procedures and only users with sysadmin role can execute them. With that said this might mean that internally those SPs are using SA to run.

Documented SP is sp_send_dbmail and request less privileges.
0
 

Author Comment

by:Deepak Kumar
ID: 41827517
Hi Vitor,
I have executed the Same job with the SA enbaled once and SA login disabled once and still found that the undocumented stored procedures related to DB mail are logged as 'SA' in  Login Name.

My question on this,
1)Is this the intended behaviour of SQL server to execute these undocumented SP's under the 'SA' Login?

2)Even after the 'SA' login is disabled, why the login name shows as 'SA' for these internal SP's?

Please help me on this as I must explain it to client with brief information.

thanks
Deepak
0
 
LVL 50

Expert Comment

by:Vitor Montalvão
ID: 41827528
I don't know the answer for question 1 since I never worked with those SPs.
For question 2, SA sometimes can mean SQL Server account.
0
 

Accepted Solution

by:
Deepak Kumar earned 0 total points
ID: 41847693
Hi Vitor,
   I have found why the System internall calls are logged as 'SA'. The main reason for this is due to the ownership of the msdb database which has the internal stored procedures.

I have tested it by changing the msdb database(in test environment) to other user who have sysadmin privileges . To my surprise those calls were called with the new database owner.

Anyway thanks vitor for your help!!

thanks
Mohan
0
 

Author Closing Comment

by:Deepak Kumar
ID: 41855063
I have given the test on my own to find out the real cause.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article we will get to know that how can we recover deleted data if it happens accidently. We really can recover deleted rows if we know the time when data is deleted by using the transaction log.
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
Via a live example, show how to extract information from SQL Server on Database, Connection and Server properties
Viewers will learn how the fundamental information of how to create a table.

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question