Error 880: BACKUP DATABASE permission denied in database

Compresses, encrypts, secures and monitors SQL Server backups.

Moderators: JonathanWatts, Chris Auckland, eddie davis, Colin Millerchip, Brian Harris, james.billings, RBA, petey

Error 880: BACKUP DATABASE permission denied in database

Postby KristoferW » Tue Mar 18, 2014 1:43 pm

Hello,

i'm on a new System (Windows Server 2012 R2 / SQL Server 2012 Enterprise) with a fresh install of SQL Backup 7.6
The SQL Backup Service runs under a Domain User with appropriate permissions.

But the scheduled Backup Jobs failed with Error 880.
Code: Select all
17.03.2014 20:10:00: Error 880: BACKUP DATABASE permission denied in database:  (master)
17.03.2014 20:10:00: SQL error 15157: Fehler bei 'Setuser' aufgrund einer der folgenden Ursachen: Der Datenbankprinzipal 'DOMAIN\\XXXX-SQL-01$' ist nicht vorhanden, der entsprechende Serverprinzipal hat keinen Serverzugriff, für diese Art von
 Datenbankprinzipal ist kein Identitätswechsel möglich, oder Sie haben nicht die erforderliche Berechtigung.


I added SkipChecks = 1 to the Registry.
Now the Backup runs without errors, but the Jobs run under the Server-User "DOMAIN\\XXXX-SQL-01$" and not with the Useraccount specified for the SQL Backup Service.

How can i get the Backup Service to run under the correct Domain User Account?

Thanks
Kristofer
KristoferW
 
Posts: 8
Joined: Wed Dec 29, 2010 10:21 am
Location: Hannover / Germany

Postby eddie davis » Wed Mar 19, 2014 4:49 pm

Thank you for your support request.

The SkipChecks registry key simply prevents SQL Backup from performing the User Rights check.

Scheduled jobs, use the SQL Agent to trigger the command to the SQL Backup Extended Stored procedure so the backup or restore runs.

I suspect the Job owner or the SQL Agent service account is being picked up as the account running the job. Is this incorrect user being displayed in SSMS or SQL Backup GUI or both?

Many Thanks
Eddie
Eddie Davis
Technical Support Engineer
Red Gate Software Ltd
E-mail: support@red-gate.com
eddie davis
 
Posts: 943
Joined: Wed Jun 14, 2006 3:47 pm
Location: Red Gate Software

Postby KristoferW » Fri Mar 21, 2014 11:23 am

Hi Eddi,

thanks for your reply.

The incorrect user is being displayed in the GUI and in the error message.

Now things go strange... I changed nothing, but suddenly the scheduled jobs are running under the SQLAgent account.
Nonetheless the jobs schould run under the correct domain user.

- The jobs are owned by "sa".
- The SQLBackup Service is running under the domain account DOMAIN\\SQL-Mgnt-Service

Please take a look at the screenshots http://1drv.ms/1nJ7E02

Thank you!
Kristofer
KristoferW
 
Posts: 8
Joined: Wed Dec 29, 2010 10:21 am
Location: Hannover / Germany

Postby eddie davis » Tue Mar 25, 2014 5:07 pm

Thank you for your reply.

The user name you see displayed in the User name field in the activity history is the task owner.

For scheduled backup and restore tasks, this is either the owner of the scheduled job or the account given to the SQL Agent.

For backup and restore tasks created through the GUI using either the backup or restore wizard, will show as the logged in user of the GUI.

Many Thanks
Eddie
Eddie Davis
Technical Support Engineer
Red Gate Software Ltd
E-mail: support@red-gate.com
eddie davis
 
Posts: 943
Joined: Wed Jun 14, 2006 3:47 pm
Location: Red Gate Software

Postby KristoferW » Wed Apr 02, 2014 1:11 pm

Hi Eddie,

thanks for the clarification.


kind regards
Kristofer
KristoferW
 
Posts: 8
Joined: Wed Dec 29, 2010 10:21 am
Location: Hannover / Germany


Return to SQL Backup 7

Who is online

Users browsing this forum: No registered users and 0 guests