Post reply

SQL Job Permissions

  • December 20, 2011 at 2:43 pm

    #252380

    Can any other user other than Sys Admin could run the jobs on sql server 2008 R2.

    If Yes what exactly the permissions to be provided to that user to just run the SQL Jobs

    Thanks You

  • December 20, 2011 at 2:45 pm

    #1423932

    Refer to this link:

    http://msdn.microsoft.com/en-us/library/ms188283.aspx

    Jared
    CE - Microsoft

  • December 20, 2011 at 9:05 pm

    #1423990

    Add the user to SQLAgentOperatorRole on MSDB database.

  • December 21, 2011 at 1:35 pm

    #1424446

    SQLAgentUserRole is the least privileged of the SQL Server Agent fixed database roles. It has permissions on only operators, local jobs, and job schedules. Members of SQLAgentUserRole have permissions on only local jobs and job schedules that they own. They cannot use multiserver jobs (master and target server jobs), and they cannot change job ownership to gain access to jobs that they do not already own. SQLAgentUserRole members can view a list of available proxies only in the Job Step Properties dialog box of SQL Server Management Studio.

    SQLAgentReaderRole includes all the SQLAgentUserRole permissions as well as permissions to view the list of available multiserver jobs, their properties, and their history. Members of this role can also view the list of all available jobs and job schedules and their properties, not just those jobs and job schedules that they own. SQLAgentReaderRole members cannot change job ownership to gain access to jobs that they do not already own

    SQLAgentOperatorRole is the most privileged of the SQL Server Agent fixed database roles. It includes all the permissions of SQLAgentUserRole and SQLAgentReaderRole. Members of this role can also view properties for operators and proxies, and enumerate available proxies and alerts on the server.

    SQLAgentOperatorRole members have additional permissions on local jobs and schedules. They can execute, stop, or start all local jobs, and they can delete the job history for any local job on the server. They can also enable or disable all local jobs and schedules on the server. To enable or disable local jobs or schedules, members of this role must use the stored procedures sp_update_job and sp_update_schedule. Only the parameters that specify the job or schedule name or identifier and the @enabled parameter can be specified by members of SQLAgentOperatorRole. If they specify any other parameters, execution of these stored procedures fails. SQLAgentOperatorRole members cannot change job ownership to gain access to jobs that they do not already own.

  • December 21, 2011 at 2:20 pm

    #1424469

    You may find this link interesting.



    My blog

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply