October 26, 2010 at 11:42 am
Is there a way to allow developers to view the Standard Reports in SSMS 2008 without granting them VIEW SERVER STATE or VIEW DATABASE STATE permissions?
It's a dilemma; on one hand, we DBAs do not want to grant blanket permissions to non-DBAs on the production servers, but, on the other hand, we want to allow some access to view basic information, such as user sessions.
How are people approaching this problem?
__________________________________________________________________________________
SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
Persisting SQL Server Index-Usage Statistics with MERGE[/url]
Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]
October 27, 2010 at 1:09 pm
If the developers have fixed role "Sysadmin" on development machines, they will be able to view Standard reports, as you know. If any production restores happen on development machines, they can run the standard reports.
why would anyone let developers have access to production environments, unless boss says so or an emergency data fix, which can be revoked immediately. They should be using the company's app, my two cents.
Thanks,
Mahidhar Vattem
October 27, 2010 at 1:12 pm
hotfix4sql (10/27/2010)
If the developers have fixed role "Sysadmin" on development machines, they will be able to view Standard reports, as you know. If any production restores happen on development machines, they can run the standard reports.why would anyone let developers have access to production environments, unless boss says so or an emergency data fix, which can be revoked immediately. They should be using the company's app, my two cents.
Thanks,
Mahidhar Vattem
I couldn't agree more... 🙂
__________________________________________________________________________________
SQL Server 2016 Columnstore Index Enhancements - System Views for Disk-Based Tables[/url]
Persisting SQL Server Index-Usage Statistics with MERGE[/url]
Turbocharge Your Database Maintenance With Service Broker: Part 2[/url]
August 31, 2015 at 12:52 am
From an Operations viewpoint I would want to see Reports like the Disk Usage or Backup And Restore Events reports, but I do not want sysadmin rights. The question is still relevant, what permissions are needed to view the standard reports?
September 15, 2015 at 9:46 am
Hi,
I have been working on a similar peice of work. The minimum permissions I had to provide and this did only show part of the report as sys.traces will need granting, etc.
GRANT VIEW ANY DEFINITION TO [AccountName];
ALTER ROLE [db_datareader] ADD MEMBER [AccountName];
The second statement will only work if the user exists if not then run this instead of the second statement:
USE [DBNAME]
GO
CREATE USER [AccountName] FOR LOGIN [AccountName]
GO
USE [DBNAME]
GO
ALTER ROLE [db_datareader] ADD MEMBER [AccountName]
GO
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply