limit which system views can be seen

  • This should be easy but I am running up against a brick wall.

    I want to give one of our application users access to sys.dm_exec_sessions but to no other system views.

    I tried giving simple select permission on the view but they still can’t get in to it because they don’t have “view server state” permission. I would rather not give them the “view server state” permission because I don’t want the user to have access to all the system views. Any thoughts on how to limit which system views can be seen.

  • How about creating a proc and use execute as?

  • GRANT VIEW SERVER STATE to 'Login'

    This is the minimum permission required to see the DMV information

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply