September 18, 2003 at 12:20 pm
Is it possible for a non-sysadm, non-owner to browse a job? All I find in BOL is must be owner or sysadm to edit. We have vendor supplied jobs that applicatioin staff would like to look at without sysadm authority.
September 18, 2003 at 2:13 pm
Grant permissions based on the info below:
sp_add_jobDeny Execute
sp_add_jobscheduleDeny Execute
sp_add_jobserverDeny Execute
sp_add_jobstepDeny Execute
sp_addtaskDeny Execute
sp_delete_jobDeny Execute
sp_delete_jobscheduleDeny Execute
sp_delete_jobserverDeny Execute
sp_delete_jobstepDeny Execute
sp_downloaded_row_limiterGrant Execute
sp_droptaskDeny Execute
sp_help_jobscheduleGrant Execute
sp_help_jobstepGrant Execute
sp_post_msx_operationDeny Execute
sp_purgehistoryDeny Execute
sp_reassigntaskDeny Execute
sp_sqlagent_check_msx_versionGrant Execute
sp_sqlagent_probe_msxGrant Execute
sp_sqlagent_refresh_jobGrant Execute
sp_start_jobDeny Execute
sp_stop_jobDeny Execute
sp_update_jobDeny Execute
sp_update_jobscheduleDeny Execute
sp_update_jobstepDeny Execute
sp_updatetaskDeny Execute
sysdownloadlistGrant Delete
sysdownloadlistGrant Select
sysdownloadlistGrant Update
sysjobsGrant Select
sysjobserversGrant Select
sysjobserversGrant Update
systargetserversGrant Select
systargetserversGrant Update
September 18, 2003 at 3:20 pm
Way cool, this is all 'use MSDB' right?
September 19, 2003 at 10:36 am
Yes on MSDB sorry I forgot to mention that
September 22, 2003 at 7:35 am
Ran the authoizations and users still can't see the jobs in Enterprise Manager. Am I missing something?
September 22, 2003 at 9:27 am
Hi,
So I have one question first. Did you grant the permissions directly to a user or role?
If you granted them to a user - try creating a database role instead in msdb. Then grant the permissions I specified in the first reply to your post.
Run the following command
sp_helprotect null, 'your_new_role'
Then put your user into that role and see what happens
make sure the output matches below.
(Sorry the formatting sucks! )
OwnerObjectGranteeGrantorProtectTypeActionColumn
dbosp_add_jobyour_new_roledboDeny Execute.
dbosp_add_jobscheduleyour_new_roledboDeny Execute.
dbosp_add_jobserveryour_new_roledboDeny Execute.
dbosp_add_jobstepyour_new_roledboDeny Execute.
dbosp_addtaskyour_new_roledboDeny Execute.
dbosp_delete_jobyour_new_roledboDeny Execute.
dbosp_delete_jobscheduleyour_new_roledboDeny Execute.
dbosp_delete_jobserveryour_new_roledboDeny Execute.
dbosp_delete_jobstepyour_new_roledboDeny Execute.
dbosp_downloaded_row_limiteryour_new_roledboGrant Execute.
dbosp_droptaskyour_new_roledboDeny Execute.
dbosp_help_jobscheduleyour_new_roledboGrant Execute.
dbosp_help_jobstepyour_new_roledboGrant Execute.
dbosp_post_msx_operationyour_new_roledboDeny Execute.
dbosp_purgehistoryyour_new_roledboDeny Execute.
dbosp_reassigntaskyour_new_roledboDeny Execute.
dbosp_sqlagent_check_msx_versionyour_new_roledboGrant Execute.
dbosp_sqlagent_probe_msxyour_new_roledboGrant Execute.
dbosp_sqlagent_refresh_jobyour_new_roledboGrant Execute.
dbosp_start_jobyour_new_roledboDeny Execute.
dbosp_stop_jobyour_new_roledboDeny Execute.
dbosp_update_jobyour_new_roledboDeny Execute.
dbosp_update_jobscheduleyour_new_roledboDeny Execute.
dbosp_update_jobstepyour_new_roledboDeny Execute.
dbosp_updatetaskyour_new_roledboDeny Execute.
dbosysdownloadlistyour_new_roledboGrant Delete.
dbosysdownloadlistyour_new_roledboGrant Select(All+New)
dbosysdownloadlistyour_new_roledboGrant Update(All+New)
dbosysjobsyour_new_roledboGrant Select(All+New)
dbosysjobserversyour_new_roledboGrant Select(All+New)
dbosysjobserversyour_new_roledboGrant Update(All+New)
dbosystargetserversyour_new_roledboGrant Select(All+New)
dbosystargetserversyour_new_roledboGrant Update(All+New)
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply