Create SQL "PowerUser" but not System Admin

  • I have a few "power Users" here that need quite a bit of access, but I don't want them to have System Administrator rights in their SQL login.

    I would like all their tables to have dbo ownership, not "Linda" or whatever their NT login is.

    I would like them to see SQL Agent scheduled jobs.

    I would like them to be able to modify SQL scheduled jobs to send themselves alerts as needed.

     

    Am I dreaming ?

     

  • Well I guess that without sa server role it's impossible to manage sqlserveragent jobs

    It's my own opinion

  • The server group Server Administrators allows access to sqlagent jobs, but also allows other options.  In order to have them have dbo owhership for the objects they create you should just be able to add them to the dbo group for each db. 

    I am sure there is a way to just grant the rights you wnat, but it may take some trial and error.  If you come up with a way to do everything you want please post it as I would be interested as well.

  • Add users to db_ddladmin, db_owner role in the user databases.  This will permit them to create objects owned by "dbo".

    For the SQLAgent jobs, in the msdb database, add users to the TargetServersRole.  Modify permissions to objects in msdb to explicitly grant exec to the necessary stored procedures.  Some objects have permission denied to the TargetServersRole, so you need to tweak this.  Users will then be able to modify jobs, add operators, view job history, etc.  Just look for the sprocs -- they are named by function.

    Regards, Melissa

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply