Appropriate security for Login for running Jobs

Question

Appropriate security for Login for running Jobs

repent_kog_is_near

SSCertifiable

Points: 7278
More actions
October 21, 2009 at 7:05 am

#138958

I would like to create a login just for running SQL scheduled Jobs.
What permissions does this login need to do it's full duties, which is to run any and all of the scheduled jobs.
thanks
Dan

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Bru Medishetty SSC-Insane Points: 23606 More actions · Answer 1

Looking at your posts for the past week or so one thing I found is it looks like you are preparing in SQL Server seriously and posting the questions that you wanted to get doubts clarified....

I suggest you search for the same information already available online.

Bru Medishetty

Blog -- LearnSQLWithBru

Join on Facebook Page Facebook.comLearnSQLWithBru

Twitter -- BruMedishetty

repent_kog_is_near SSCertifiable Points: 7278 More actions · Answer 2

I created a SQL Login, and created the user for that login in the required databases, and also granting permissions for the Login on the few objects in the databases; and then finally assign the Login to the scheduled job.

Could you comment if this suffices. I did not touch the roles SQLAgentOperatorRole,SQLAgentReaderRole,SQLAgentUserRole

Am I following the best approach?

Thanks

Dan

MANU-J. SSC-Dedicated Points: 31126 More actions · Answer 3

http://msdn.microsoft.com/en-us/library/ms188283.aspx

You need to grant membership to one of these roles.

MJ

repent_kog_is_near SSCertifiable Points: 7278 More actions · Answer 4

MJ.

The link gives idea of how to control users who want to have access to the jobs etc. In my scenario I just want to have an 'user'- not a person- account that will be responsible for all the Jobs, not for creaiton of jobs, just to run the jobs that are created by the DBAs. Something like service account, I want an account with the just enough previledges, but able to run all the jobs.

The method I had posted, gave me an user who could run the job, but I needed to give that account permissions on specific objects before the job ran in success.

In this situation, I would like your input on what is the best practise and recommendation.

Thanks

Dan.