how to modify another jobs without sa?

Question

how to modify another jobs without sa?

tony28

SSCertifiable

Points: 7112
More actions
March 22, 2018 at 12:28 pm

#410350

Hello,
is any way how to do rights for user, and he will be possible modify another than only his jobs ?
some possible create my role than has more right than SQLAgent Operator in msdb and will be possible also update in Wizard and not with procedure ?
Thanks

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

AlexSQLForums SSChampion Points: 14277 More actions · Answer 1

tony28 - Thursday, March 22, 2018 12:28 PM
Hello,
is any way how to do rights for user, and he will be possible modify another than only his jobs ?
some possible create my role than has more right than SQLAgent Operator in msdb and will be possible also update in Wizard and not with procedure ?
Thanks

Here you go

https://msdn.microsoft.com/en-us/library/ms187901(v=sql.105).aspx

Alex S

tony28 SSCertifiable Points: 7112 More actions · Answer 2

AlexSQLForums - Thursday, March 22, 2018 1:26 PM
tony28 - Thursday, March 22, 2018 12:28 PM
Hello,
is any way how to do rights for user, and he will be possible modify another than only his jobs ?
some possible create my role than has more right than SQLAgent Operator in msdb and will be possible also update in Wizard and not with procedure ?
Thanks
Here you go
https://msdn.microsoft.com/en-us/library/ms187901(v=sql.105).aspx

Hi,
thanks for this, but I tried and not sure if I set right.

1) new testcredential for test login
2) new proxy with sysadmin roles for testcredential
3) what here plese ? Check the appropriate subsystems for this proxy.>> I tried and nothing function for edit jobs .. runs is ok , but i cannot edit schedule or something else.

Thanks

Jeff Moden SSC Guru Points: 1004363 More actions · Answer 3

tony28 - Thursday, March 22, 2018 12:28 PM
Hello,
is any way how to do rights for user, and he will be possible modify another than only his jobs ?
some possible create my role than has more right than SQLAgent Operator in msdb and will be possible also update in Wizard and not with procedure ?
Thanks

To be honest, I wouldn't give any user such privs. They can get me fired with such privs. Worse than that, they can cause great harm to the company where the company could lose customers and that could put a whole lot of people out of a job. Any and all jobs must be reviewed by a DBA for the sake of safety of the data and safety of the server and I don't care whose data it actually belongs to.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

tony28 SSCertifiable Points: 7112 More actions · Answer 4

Jeff Moden - Thursday, March 22, 2018 3:28 PM
tony28 - Thursday, March 22, 2018 12:28 PM
Hello,
is any way how to do rights for user, and he will be possible modify another than only his jobs ?
some possible create my role than has more right than SQLAgent Operator in msdb and will be possible also update in Wizard and not with procedure ?
Thanks
To be honest, I wouldn't give any user such privs. They can get me fired with such privs. Worse than that, they can cause great harm to the company where the company could lose customers and that could put a whole lot of people out of a job. Any and all jobs must be reviewed by a DBA for the sake of safety of the data and safety of the server and I don't care whose data it actually belongs to.

Hello,

this is some kind of customer DBA, not directly any user, but we want to prevent some missunderstanding due to some change configuration on servers. So this is why I would like these kind of permission. For edit/manage jobs, because they know what they are doing, but prevent to some setting on servers, because this is my responsibility.
I know that for example SQLaudit is possible for checking if something happens, but in 2012 and more, here cannot ,, this is not enterprise 2008 R2.

But in generally I agree with you, in ideal world be would good, but you know... sometimes..... 🙂

Thanks