Minimum permissions for SQL Response users

Monitor, diagnose and receive alerts to problems across your SQL Servers.

Moderators: eddie davis, david connell, dlkj, Colin Millerchip, priyasinha, Emma A

Minimum permissions for SQL Response users

Postby wilcoxs » Wed May 27, 2009 6:56 pm

I may have missed this in the docs and on the forums but what are the minimum permissions I need to give to an SQL user and a Windows user to allow SQL Response to operate correctly ?

The docs all seem to use SA accounts but that seems a bit too open.

I guess the SQL user will have additional requirements if we want to run SQL Profile Traces too. Please could someone let me know what these are.

Many thanks in advance,

Simon.
wilcoxs
 
Posts: 2
Joined: Wed May 27, 2009 6:02 pm
Location: London, UK

Postby Linda Hawksworth » Mon Jun 01, 2009 12:50 pm

Please see the following document regarding permissions for SQL Response:

http://www.red-gate.com/support/Knowled ... _Setup.pdf
Linda Hawksworth
 
Posts: 192
Joined: Mon Jun 25, 2007 11:32 am

Thanks.

Postby wilcoxs » Mon Jun 01, 2009 1:09 pm

Thank you, that was just what I needed. I'm sure I'd read that document but must have missed the relevant piece.

Many thanks,

Simon.
wilcoxs
 
Posts: 2
Joined: Wed May 27, 2009 6:02 pm
Location: London, UK

Response needs SQL monitor account to have SYSADMIN rights?

Postby wclemmer » Mon Jan 11, 2010 4:41 pm

If I'm reading this correctly, it still says that the account used to log in to every monitored SQL Server must have SYSADMIN privileges. This can't really be true since I'm fairly certain that Response doesn't actually need to add/drop databases to be able to monitor a server, for example. It's also against (at least) my company's security policy (and common sense) to grant a service account SA rights, or to use the SA account as a service account.

While we're at it, the Windows account on the Repository server doesn't really need full Administrator rights either, does it? Just to run the service? I'm sure there's a specific set of rights that's really required but difficult to define/support? And the SQL Server account on that server? Obviously it doesn't really require full sysadmin rights either, especially after installation?

I'm assuming that at some point one of your developers wrote the scripts that would create the SQL Server Roles and Windows rights with exactly the privileges required for Response to work, but it proved too unwieldy to support.

Could you post those scripts please? :D
wclemmer
 
Posts: 3
Joined: Tue Dec 01, 2009 6:41 pm


Return to SQL Response 1

Who is online

Users browsing this forum: No registered users and 0 guests