January 18, 2017 at 8:29 pm
Comments posted to this topic are about the item ADMINISTER BULK OPERATIONS
January 18, 2017 at 10:47 pm
This was removed by the editor as SPAM
January 19, 2017 at 2:26 am
This is a role I really need to read more into. Reminds me that i really need to get our CRM account permissions "dumbed" down. It's good to know that giving it Administer Bulk operations doesn't give it much access, apart from run BULK INSERT or use OPENROWSET(BULK,...). Now i just need a DEV enviroment so that i can test and not break a mission critical system... -_- Maybe I'll wait for Easter and test it (on live) when no one is working (or looking) :Whistling:
Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
Larnu.uk
January 19, 2017 at 7:17 am
Thom A - Thursday, January 19, 2017 2:26 AMThis is a role I really need to read more into. Reminds me that i really need to get our CRM account permissions "dumbed" down. It's good to know that giving it Administer Bulk operations doesn't give it much access, apart from run BULK INSERT or use OPENROWSET(BULK,...). Now i just need a DEV enviroment so that i can test and not break a mission critical system... -_- Maybe I'll wait for Easter and test it (on live) when no one is working (or looking) :Whistling:
You also need INSERT permission on the table to run BULK INSERT. Just having ADMINISTER BULK OPERATIONS is not sufficient to insert.
_______________________________________________________________
Need help? Help us help you.
Read the article at http://www.sqlservercentral.com/articles/Best+Practices/61537/ for best practices on asking questions.
Need to split a string? Try Jeff Modens splitter http://www.sqlservercentral.com/articles/Tally+Table/72993/.
Cross Tabs and Pivots, Part 1 – Converting Rows to Columns - http://www.sqlservercentral.com/articles/T-SQL/63681/
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs - http://www.sqlservercentral.com/articles/Crosstab/65048/
Understanding and Using APPLY (Part 1) - http://www.sqlservercentral.com/articles/APPLY/69953/
Understanding and Using APPLY (Part 2) - http://www.sqlservercentral.com/articles/APPLY/69954/
January 19, 2017 at 7:35 am
Sean Lange - Thursday, January 19, 2017 7:17 AMYou also need INSERT permission on the table to run BULK INSERT. Just having ADMINISTER BULK OPERATIONS is not sufficient to insert.
Yep, got that, as it can't do anything that the public role on the database can't do. It'll have upped permissions on it's own db, however, the vendors solution for the CRM to "work", is to give it sysadmin (because they don't know better). Unfortunately, as the software has been set up and running for the last 14 years, and the vendor has never done research to the otherwise, breaking something missing critical is less acceptable than getting the whole fixed from a Director's point of view.
I'm sure many have you have faced the politics of saying "I need to change these settings, but it will take the system offline for a few hours while I sort it out" and suddenly you're the subject of a company wide witch hunt to stop you casting your "evil" spell.
Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
Larnu.uk
January 19, 2017 at 8:08 am
Thom A - Thursday, January 19, 2017 7:35 AMSean Lange - Thursday, January 19, 2017 7:17 AMYou also need INSERT permission on the table to run BULK INSERT. Just having ADMINISTER BULK OPERATIONS is not sufficient to insert.Yep, got that, as it can't do anything that the public role on the database can't do. It'll have upped permissions on it's own db, however, the vendors solution for the CRM to "work", is to give it sysadmin (because they don't know better). Unfortunately, as the software has been set up and running for the last 14 years, and the vendor has never done research to the otherwise, breaking something missing critical is less acceptable than getting the whole fixed from a Director's point of view.
I'm sure many have you have faced the politics of saying "I need to change these settings, but it will take the system offline for a few hours while I sort it out" and suddenly you're the subject of a company wide witch hunt to stop you casting your "evil" spell.
Not to mention the users who suddenly can't do the cowboy crap they used to because they don't have permission to anymore. Then they get really incensed when you tell them that was the whole point of securing the system so they can't just do whatever they want anymore. You can tell them that they can do that stuff if they have the right permissions but they have to get that through somebody else who now has the ability to administer those privileges. Those are often met with the "you are making it impossible to do my job". My response to that is usually something like "actually I protecting my weekend because when you do things to the system that you don't fully understand it is me that will have to unravel the train wreck".
_______________________________________________________________
Need help? Help us help you.
Read the article at http://www.sqlservercentral.com/articles/Best+Practices/61537/ for best practices on asking questions.
Need to split a string? Try Jeff Modens splitter http://www.sqlservercentral.com/articles/Tally+Table/72993/.
Cross Tabs and Pivots, Part 1 – Converting Rows to Columns - http://www.sqlservercentral.com/articles/T-SQL/63681/
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs - http://www.sqlservercentral.com/articles/Crosstab/65048/
Understanding and Using APPLY (Part 1) - http://www.sqlservercentral.com/articles/APPLY/69953/
Understanding and Using APPLY (Part 2) - http://www.sqlservercentral.com/articles/APPLY/69954/
January 19, 2017 at 8:24 am
So today I worked hard with it. Helped MSDN https://msdn.microsoft.com/en-us/library/ms190312.aspx
and an article from Kenneth Fisher https://sqlstudies.com/2016/11/10/is-it-safe-to-grant-administer-bulk-operations/
Thanks Steve for this not simple but interesting question. 🙂
January 20, 2017 at 5:27 am
Thanks for the straightforward question, Steve.
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply