November 30, 2017 at 11:42 am
Steve Jones - SSC Editor - Thursday, November 30, 2017 11:27 AMjasona.work - Thursday, November 30, 2017 11:11 AMWhat would it take to get MS to create a role so that people could view the SQL logs without having to either put them in the securityadmin role, or use undocumented stored procedures?
Is there a Connect item for this already I can upvote?I'm trying to grant the minimum privileges to myself (long story, I have two accounts, my privileged and non-privileged. Because of a change in security settings on my desktop, I can no longer launch SSMS with my privileged account, so I'm looking for a way to at least be able to quickly monitor / check the servers without being a full SA, then I connect to a Terminal Server with my privileged account when needed) so I can check for long-running queries (got that sorted out,) check Agent job history (easy,) and review the SQL Logs (now, we have a problem.)
I could add my normal account to the securityadmin role, but then I'd have access to things I should only be doing with my privileged account (add / remove logins, change passwords...)
Yeah, I'm grumbling...
A reason to improve security that is important enough to move resources off of some new sales feature. I think there are a number of these separation of duties items that I'm hoping GDPR will put pressure on them to implement. I haven't looked here, but is there not a custom server role that can be created here?
One can hope...
I've got the details of a custom role to allow viewing the various DMVs, so that covers the general monitoring, but everything I've found so far for the SQL Logs involves either the securityadmin role, or the undocumented xp_readerrorlog (which, I'll admit, I do use sometimes.) But it'd be MUCH nicer to actually either have a "logreader" role built-in, or a simple way to grant access to the logs...
November 30, 2017 at 11:51 am
jasona.work - Thursday, November 30, 2017 11:42 AMOne can hope...
I've got the details of a custom role to allow viewing the various DMVs, so that covers the general monitoring, but everything I've found so far for the SQL Logs involves either the securityadmin role, or the undocumented xp_readerrorlog (which, I'll admit, I do use sometimes.) But it'd be MUCH nicer to actually either have a "logreader" role built-in, or a simple way to grant access to the logs...
Perhaps, though there is privileged information in here I'd want to be careful with. However, at the very least, I could see auditors or security personnel needing to view these, so we should have some role.
I can only suggest Connect, and I'll vote for it.
November 30, 2017 at 12:33 pm
Steve Jones - SSC Editor - Thursday, November 30, 2017 11:51 AMjasona.work - Thursday, November 30, 2017 11:42 AMOne can hope...
I've got the details of a custom role to allow viewing the various DMVs, so that covers the general monitoring, but everything I've found so far for the SQL Logs involves either the securityadmin role, or the undocumented xp_readerrorlog (which, I'll admit, I do use sometimes.) But it'd be MUCH nicer to actually either have a "logreader" role built-in, or a simple way to grant access to the logs...Perhaps, though there is privileged information in here I'd want to be careful with. However, at the very least, I could see auditors or security personnel needing to view these, so we should have some role.
I can only suggest Connect, and I'll vote for it.
Vote away!
https://connect.microsoft.com/SQLServer/feedback/details/3144579
My first Connect submission, I'm so HAPPY!
😎:w00t:
November 30, 2017 at 12:58 pm
jasona.work - Thursday, November 30, 2017 12:33 PMVote away!
https://connect.microsoft.com/SQLServer/feedback/details/3144579My first Connect submission, I'm so HAPPY!
😎:w00t:
Voted
November 30, 2017 at 1:05 pm
Steve Jones - SSC Editor - Thursday, November 30, 2017 12:58 PMjasona.work - Thursday, November 30, 2017 12:33 PMVote away!
https://connect.microsoft.com/SQLServer/feedback/details/3144579My first Connect submission, I'm so HAPPY!
😎:w00t:Voted
So did I.
November 30, 2017 at 2:03 pm
Lynn Pettis - Thursday, November 30, 2017 1:05 PMSteve Jones - SSC Editor - Thursday, November 30, 2017 12:58 PMjasona.work - Thursday, November 30, 2017 12:33 PMVote away!
https://connect.microsoft.com/SQLServer/feedback/details/3144579My first Connect submission, I'm so HAPPY!
😎:w00t:Voted
So did I.
Me three
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt
Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning
December 1, 2017 at 6:29 am
I am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.
There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt
Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning
December 1, 2017 at 6:33 am
Grant Fritchey - Friday, December 1, 2017 6:29 AMI am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
Absolutely shocking!
😎
December 1, 2017 at 7:08 am
Grant Fritchey - Friday, December 1, 2017 6:29 AMI am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
Am I missing some context here? And please don't tell me that I am the former MVP you refer to...
December 1, 2017 at 7:11 am
Hugo Kornelis - Friday, December 1, 2017 7:08 AMGrant Fritchey - Friday, December 1, 2017 6:29 AMI am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
Am I missing some context here? And please don't tell me that I am the former MVP you refer to...
December 1, 2017 at 7:11 am
Hugo Kornelis - Friday, December 1, 2017 7:08 AMGrant Fritchey - Friday, December 1, 2017 6:29 AMI am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
Am I missing some context here? And please don't tell me that I am the former MVP you refer to...
Good gosh no. It's a thread here on SSC.
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt
Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning
December 1, 2017 at 7:50 am
Grant Fritchey - Friday, December 1, 2017 7:11 AMHugo Kornelis - Friday, December 1, 2017 7:08 AMGrant Fritchey - Friday, December 1, 2017 6:29 AMI am surprised, shocked, horrified, dismayed, thunderstruck, flabbergasted and down right gobsmacked to find out that adding one clustered index on one table did NOTHING to improve a 25 page query that references 10-15 different tables and has a 60 column GROUP BY clause that includes calculations with WHERE clauses that include heinous calculations on the columns.There might just be a reason why former MVPs are, in fact, former. What utter shite for advice.
No, I'm not at all put out by this. Why do you ask?
Am I missing some context here? And please don't tell me that I am the former MVP you refer to...
Good gosh no. It's a thread here on SSC.
I have seen the execution plan, that query is in serious need of a rewrite.
December 1, 2017 at 8:01 am
Lynn Pettis - Friday, December 1, 2017 7:50 AMI have seen the execution plan, that query is in serious need of a rewrite.
I didn't even bother looking at the plan. There's nothing to rescue from this query. Burn it with fire. Sow the ground with salt. Start again.
I do feel bad for the person dealing with it though. What a nightmare.
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt
Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning
December 1, 2017 at 8:11 am
jasona.work - Thursday, November 30, 2017 12:33 PMVote away!
https://connect.microsoft.com/SQLServer/feedback/details/3144579My first Connect submission, I'm so HAPPY!
😎:w00t:
Voted.
December 1, 2017 at 8:28 am
At risk of politicizing The Thread, has anyone noticed any shifts in their workplaces due to the current #MeToo / Sexual Harassment movement?
I'm curious to see how far this has filtered down (if at all) into places that the news media hasn't picked up on yet.
Viewing 15 posts - 60,511 through 60,525 (of 66,749 total)
You must be logged in to reply to this topic. Login to reply