Tracking Forums, Newsgroups, Maling Lists
Home Scripts Tutorials Tracker Forums
  Advanced Search
  HOME    TRACKER    MS SQL Server






SuperbHosting.net & Arvixe.com have generously sponsored dedicated servers and web hosting to ensure a reliable and scalable dedicated hosting solution for BigResource.com.







SA Rights


Is there a way in SQL server to grant "SA" rights to non-SA users for certain commands.

I know there's a way to do this in Sybase by creating a password protected role and then activating it within a stored procedure.

Thus, the specific right is only active for the brief duration of the stored procedure - which runs the particular command to be granted. The role is de-activated at the end of the stored procedure.

Any suggestions are greatly appreciated.

Thanks,

Isaac


View Complete Forum Thread with Replies
Sponsored Links:

Related Messages:
How To Setup SQL DBA To Have Full Admin Rights To Reporting Services Without Giving Rights To OS
I found an article that told me to go to http:\localhost
eports where i would have to set the user as a system manager i belive, then go into the site configuration page on the home screen and configure the user as a system administrator. This seems to not fix all my issues.



Is there anythign else i'm missing? Sorry i'm a windows admin not a SQL admin so i just dont have the knowledge on this topic, any asssitance would be greatly greatly greatly apreciated.



Also, as extra credit (haha) does anyone know the exact rights i need to give to a DBA within SQL or anywhere on the system to give the DBA full control over SQL without giving the SQL admin local admin right's to the OS??????



Thank you all for your time in reviewing this thread, any assistance would be greatly appreciated.!!!!!

View Replies !   View Related
I Need To Give DBA Full Admin Rights To SQL 2005 Without OS Windows Rights, Can Anyone Help Please!!
The DBA at our location is demanding local admin (windows) right's to the box so he can function. Right now when he logs in i have given him right's to the inetpub directory, sql directory, i have set him as a sysadmin on sql2005 and gone into the http:\localhost
eports and set him up as a system manager and under site priveledges set him as a sys admin. When he tries to login and configure the report server he gets the following error:



Title-Reporting services configuration manager

Error-There was an error refreshing the UI. bla bla bla

A WMI error has occurred and no additional error information is availiable



Title-Reporting services configuration manager

Error-There was an error while switching panels. The most likely cause is an error retrieving WMI properties. bla bla bla

A WMI error has occurred and no additional error information is availiable



then when he's in sql server 2005 surface area configuation

Title-Surface Area Configuration

Error-Access denied (system.management)



Is there any documentation or anythign anyone can tell me that i can do to give this DBA full access to configure and admin the SQL portion of his system without giving him admin rights to the OS???



Please help!!



Thanks for any time anyone has taken to review this thread!!

View Replies !   View Related
Rights
I have a basic question regarding rights. What level of rights do Ihave to have to grant another user update rights? I don't want togive everyone owner rights. Can a person with update rights grantanother person update rights?Thanks.

View Replies !   View Related
Sa Rights In 6.5
Hello, I need to create a sp that allows a user(not sa) to reset passwords using sp_password. The part that I'm stuck on is how to login within the proc so that the user(not sa) can exec the sp_password as sa without having to give the user sa rights. I don't mind hard coding the sa password with the proc but I can not give sa password to the users. Do I need to somehow alter sp_password for this to work?

Any help is much appreciated.

Thanks.

View Replies !   View Related
DBO Rights
Hi

Need to give a user permission to add logins and users to a database. Have tries to alias the user to DBO but it doesnt work. Is there a way to do it other than reassigning DBO permissions to the user.

Thanks

View Replies !   View Related
Sa Rights
Hello, I need to create a sp that allows a user(not sa) to reset passwords using sp_password. The part that I'm stuck on is how to login within the proc so that the user(not sa) can exec the sp_password as sa without having to give the user sa rights. I don't mind hard coding the sa password with the proc but I can not give sa password to the users. Do I need to somehow alter sp_password for this to work?

Any help is much appreciated.

Thanks.

View Replies !   View Related
Help With Rights
I want to give user right to create temp tables but I don't want to allow him modify any other tables, or any other rights. Any ideas?

View Replies !   View Related
Sp_elpuser Rights
what users have the rights to execute sp_helpuser?

View Replies !   View Related
Db_owner Rights
If I on a remote hosting server have db_owner rights, do I then also havedb_securityadmin and db_dlladmin rights?BRGS, TCHillII

View Replies !   View Related
Rights Issue
How do I text base add my domain users group with full rights to my database. I am using teratrax to manage my database. This is what comes up when I click on new database user

-- Replace all lower case words with your own code.

EXECUTE SP_GRANTDBACCESS 'login', 'user_name'

View Replies !   View Related
Question About DBA Rights
Here is a debated question:

Does the DBA need admin rights?

They are not responsible for the server, user accounts, software updates of any kind or odbc configurations. This is controlled by the LANWAN server support group.

With the assigned SYSADMIN role, service account as local administrator, they have NTFS permissions the the DATAApplication partition and rights to stop and start all related services to SQL.

They can also access event viewer, performance monitor and other MMC snap-ins as read only.

Can they do required functions?

Thanks,

RJ

View Replies !   View Related
Why A DBA Needs Sa Access Rights
I remember seeing a document on this site a couple of years ago that explained reasons why a DBA needs sa access rights. I can go into BOL and generate a list of things you can only do with sa rights. However the article I am looking for was well written, much better than I could do.

My infrastructure team has decided that the DBA's and Sr. Developers will not have sa access rights. All schema changes, stored proc creation, view creation, database backups, maintenance plans, etc will go through their server engineers. They do not understand what they are getting into.

Does anyone have a nice document that would aid me in my efforts to convince the Infrastructure group to change their "new" policy?

Thanks for any info!!

Jeff

View Replies !   View Related
DBA Role And His Rights
Hi everybody,
I would like to get an input from as many people as possible on the following:
In our organization DBA is responsible for 5 servers ( currently NT 4/SQL 7)and is a part of group of a 5 people including manager and 3 developers.
DBA currently has a FULL access to every server.
In a few months we will be replacing the existing system with Windows 2000/SQL 2000.
LAN group will give to DBA only a read rights for the Windows 2000 environment, saying that the AUDITORS, both internal and external, require that. In other words, if DBA needs to run a command prompt, move files from one directory to another in Production environment, he has to fill the request to LAN, so LAN group would do that.
So I guess the main question(s) is:
What is the degree of involmment of DBA with Operating system?
Is DBA suppose to be an NT administrator ( I dont think so, since DBA has a lot of other thing to do?
If DBA accidently makes an unwanted changes to the Operating System, who should be blamed for ( not personally, but in more general terms) and would it be an extra argument to take write rights away from a DBA?
What auditors saying about that?
Thanks a lot in advance,
Andrei

View Replies !   View Related
Db_securityadmin Rights ?
Just to verify. If on database A I have a user (user A)who has been assigned db_securityadmin rights to that db, and I have a predefined db role, that user A can add memebers who have been assigned to the public group on database A, to any pre-defined database roles for that database.

View Replies !   View Related
User Rights
Hi All,

I have a user that should only have the rights to view the jobs and database properties within Enterprise Manager. I am not sure how to do that. Can you please help? Thanks.

View Replies !   View Related
Users And Their Rights
Hi All,

I've restored the dev db from the prod backup which overwrote the users and their rights in dev db. Is there any way that I can find out what those rights were? I have the list of users in dev db but not their rights . Thanks.

View Replies !   View Related
DBO Aliased And SA Rights
I have a user that is requesting sa rights on a test server. I prefer to give him aliased
dbo rights. What is the difference between the two?? What can he not do with dbo
that he could with sa??

View Replies !   View Related
Admin Rights
A current security review here is recommending the DBA's NT account be removed from the local administrators group on the SQL Server and only the required rights for being a DBA are granted.

Are there any pure DBA tasks I won't be able to do unless I am in local admin

My problem is not being sure of what exactly is needed. Has anyone else already gone through this and have a useful list of 'less-than-local-admin' rights. Apparently I'm not allowed to shutdown servers (Operations staff only!).

Thanks for any pearls of wisdom.

Simon Wright

View Replies !   View Related
Access Rights
hi, I am having a database in sql server 7.0. it has a web front end database. how can I grant access to the tables. do I create a guest logins in the security folder, then in the database user tab, I give access as read,write. Or there is another way to do it.

Thanks
Ali

View Replies !   View Related
Rights On SP/Urgent
Hi,
I have public and dbo rights on a sp.
I am trying to call this sp thru a EntityBean(Java).
But I am getting an error.
Can anyone tell me what all rights do I need to execute this stored proc.?
TIA.
Jay

View Replies !   View Related
Rights To Run Profiler
what are the minimum rights I can set for user- developer in order to use Sql profiler
I don't want set "member of sysadmin role " to developers

Thanks .

View Replies !   View Related
DBA Role And His Rights
Hi everybody,
The below I posted on SQL 2000 Forum about a week ago.
Any new thoughts................
I would like to get an input from as many people as possible on the following:
In our organization DBA is responsible for 5 servers ( currently NT 4/SQL 7)and is a part of group of a 5 people including manager and 3 developers.
DBA currently has a FULL access to every server.
In a few months we will be replacing the existing system with Windows 2000/SQL 2000.
LAN group will give to DBA only a read rights for the Windows 2000 environment, saying that the AUDITORS, both internal and external, require that. In other words, if DBA needs to run a command prompt, move files from one directory to another in Production environment, he has to fill the request to LAN, so LAN group would do that.
So I guess the main question(s) is:
What is the degree of involmment of DBA with Operating system?
Is DBA suppose to be an NT administrator ( I dont think so, since DBA has a lot of other thing to do?
If DBA accidently makes an unwanted changes to the Operating System, who should be blamed for ( not personally, but in more general terms) and would it be an extra argument to take write rights away from a DBA?
What auditors saying about that?
Thanks a lot in advance,
Andrei

View Replies !   View Related
SQL Agent Rights
If I connect with SQL Management Studio to a server I cannot open or change SQL Agent jobs. (I can see them, but if I ask properties it opens a new job window).

At home I have no problem managing jobs.

I also cannot stop or start the SQL Agent.

What rights do I need? I am not in a domain, but with using the same username and password on my laptop as on the server and I have no problem connecting, add/changes databases and such.



Henri
~~~~
There's no place like 127.0.0.1

View Replies !   View Related
SQL Restore Rights
Hi All,
I've got an SQL 2005 server setup with some databases. I'm trying to set it up so that a user can upload his database backup and then restore the DB using Studio Express but am having some issues with it. The user can upload his database fine, but when we try and go in to restore it, he can't view the directory or file of the backup. I've added the service account that SQL runs as, as well as the SQL2005%Machine%etc... user without much luck. The only thing I can think of from here is SQL permissions and I'm a little vague on how to accomplish what I want. One other thing is that if I add sysadmin rights to the user, they can see the directories fine. I tried adding dbcreator as recommended by other posts and that didn't work either. Any help would be greatly appreciated. Thanks!

Brad

View Replies !   View Related
Access Rights...
Hello,




I want to restrict the database not to be accessed from anywhere except
my webservice...I mean, my client applications or anyone else can not
be able to access the database...





How can I do this?



Thanks very much...

View Replies !   View Related
User Rights
Hi,
I am using SSRS 2005.
Created several reports on the server where SSRS is installed.
In addition I managed to develop a few more reports on my work station and then deployed the reports to the server.
From my local machine I can brose to http://servername/reports andview/run the reports.
Now I would like to find out if/how others can view some of the reports. How/where do I set rights...?
Thanks

View Replies !   View Related
Question About Rights


We are conducting a pilot around the 2007 DM ad in for Excel for use at our company. We have sql server enterprise (64 bit) installed with Analysis server (all on one box). I have set up the Data Mining Ad in db on the Analysis Server. I've given a business user admin rights in the data mining db on AS. We are trying to use a table in a database on the same server as input to an estimate model. When I create the model (I'm a sysadmin), I have no issues using excel to point to the table and run the model. When the user runs the model, he get the following error.


Errors in the high-level relational engine. A connection could not be made to the data source specified in the query.
Either the xxx user does not have permission to access the " object, or the object does not exist.

The user does have access to the table - he actually created it. Since this works when I run the model, it seems like this has to be how AS is passing in the table? Has anyone seen a similar error?

On a different topic, how is it best to configure user access to datamining functionality? Create one AS db per user? Thanks!

Dave

View Replies !   View Related
SRS Reporting Rights


I have recently published a report to SRS. I created a new service account and assigned that account the "Browser" role for the report that I wanted the service account to access. However, upon connecting to the SRS URL with the new service account, I am unable to view any reports. I then added the "view" and even the "Content Manager" role, and I still could not see the reports. I made the service account an admin on the box and I could see the necessary reports. Is there a local group that I need to place user accounts that I want to be able to access the reports I publish to the srs url?

Thanks,

Joe

View Replies !   View Related
Redistribute Rights For Me?
Hi all,

I'm just a hobby programmer that writes programs for my personal use and maybe for friends.

I'm planning on using VB.Net 2008 Express edition for my development. I was using SQLite before with VB.Net 2005, but it seems the ADO.NET provider will not work with the VB.Net 2008 Express edition, so I'm thinking of moving to SSCE.

Do I still have to sign up for redistribution rights? I looked at the choices (What Best Describes You) when you start to sign up for those rights and I don't think I fall under any.

I was hoping to either just copy the 7 DLLs to the client computer or use the redistributable MSI installer to install SSCE.

Any help will be appreciated.

JB

View Replies !   View Related
User Rights
I'm running intoan issue with a user with restricted rights being able to access a local SDF file. The user has Modify right to the folder (and the file), but cannot access the SDF if it was created by someone else.

The only two workarounds I've found are: 1) If theI delete the SDF and then the restricted user creates the SDF they can then access it. 2) If I grant Full Control to the folder then the restricted user can access the database.

Is this by design? Are there programatic changes that can be made to enable access?

All users who login to the box (Windows XP) need to be able to access the same SDF. The SDF is stored on the local machine.

Thanks,rlw...

View Replies !   View Related
File System Rights
I have setup a test IIS box and would like to use that as my development platform. I have installed sql express 2005 for my database on the box as well.
 I can setup new pages on the file server just fine.. But when I try and setup a login page and use the asp.net configuration web page to setup security which create a user DB it will not let me create it...
 I get the following:
The following message may help in diagnosing the problem: An error occurred during the execution of the SQL file 'InstallCommon.sql'. The SQL error number is 5110 and the SqlException message is: The file "J:INETPUBNBSRECAPAPP_DATAASPNETDB_TMP.MDF" is on a network path that is not supported for database files. CREATE DATABASE failed. Some file names listed could not be created. Check related errors. Creating the ASPNETDB_4a9331c5903148ca92e3ffbee7d29976 database...
 
Can someone let me know.

View Replies !   View Related
Diagrams On SQL 2005 - No Rights!!
How do I create diagrams on SQL 2005 Dev?I've attached db files created in SQL 2000. I can access them fine, but clicking on the 'db diagram' option in Management Studio reports 'Objects cannot be installed because db does not have a valid owner'.Clicking on db properties, and File shows the owner is by current login (machine admin user). ie 'mymachinejohn'. Both that user and 'BUILTINAdministrators' has the sysadmin role.Help!!Thanks,John

View Replies !   View Related
MSDE Distributions Rights
Hi,

I want to develop some web solutions for some clients and they dont have SQL Server. I was thinking of using MSDE as there backend.

Is it legally ok for me to put my web solution and MSDE on a CD and distribute it ?

I have read the MSDE licensing agreement and its confusing

View Replies !   View Related
SQL Server Access Rights
I am having trouble openning a connection to a sql server database that resides on another machine. When the web server and SQL server run on the same machine, everything works fine. When the web server and sql server are located on different machines, I get an access rights error when i try to open the connection. I suspect that this involves trust levels, but all the tweaking I have done has not resolved this issue. Any help would be much appreciated!

View Replies !   View Related
MS SQL Server - User Rights
Does anyone know if it possible to make a specific table invisible to auser when they are in Enterprise Manager?

View Replies !   View Related
Cannot Remove Dbo Rights From A User
In the login properties on the Database Access tab, a user's name saysdbo instead of his name. I do not want him to have dbo permissions. Icannot drop the db_owner permissions that he has on the databasebecause I get the error "Error 15405: Cannot use the reserved user orrole name 'dbo'."How do I remove these permissions from this user?

View Replies !   View Related
Dynamic Sql And Rights Issues
Ok, I finally got the company working towards having a new log in for our app that will only have the exec rights of the Stored Procs the app uses. The problem is we came up with an issue using dynamic sql. Seems that SQL2k wants to have select rights to the table you are using to select from when generating a dynamic string within the stored procedure:

create spTestDynamic
as
declare @test varchar(100)

set @test = 'Select * from table'

exec (@test)
--or
--exec sp_executesql @test


Both exec statements want to have select rights to the table. Is there a way around this or am I screwed and have to rewrite these stored procs so that it doesn't use dynamic sql?

Thanks,
DMW

View Replies !   View Related
Limited User Rights
Hi All,

How can I give the user view rights only?

View Replies !   View Related
User Rights System
I need some advice with a msSQL 2005 databaseI'm creating a administration program in vb.net based on a new msSql db. This programme is involved with customeradmin, facturation, products, sales,...by example: Some employees don't has anything to do with product, so they don't need the rights to delete, create or edit it.The question is how can i resolve this problem, because i don't find any good solution. The rights are for every employee different, and can be changed by a admin panel. The admin can give a employee specific rights for every part of the programmeso how can we give a user certain rights when he is logging in into the program.thanks, BoardD :S ;)

View Replies !   View Related
Domain Users Rights
I have a problem that im using Active Directory in Win2k Server, when domain users logon to workstations they can't open sql server databases, SQL server is local installed on Workstation and operating system is XP.

When i give administrator rights to users the sql server works fine.

Tell me is there is a way to use sql server without giving to the user administrative rights?

thanks

View Replies !   View Related
Equivalent Rights To SA In SQL Server 6.5......
In sql server 6.5, standard security......


Will i assign the SA rights to some one/login...?

wincy

View Replies !   View Related
SQL Profiler & Access Rights
My server admins say they can give me access to Profiler by giving me EXEC permissions on the stored procs that profiler uses. They won't make me a part of the Sysadmin fixed server role.

Has anyone got this to work??

Thanks!!

View Replies !   View Related
Allow A NON-SysAdmin The Rights To Run Job In Cmdshell
RFA_help_NON-SysAdmin_RunDOS_Jobs.txt

I am trying to allow a NON-SysAdmin the rights to run a job in the command shell. (I'm referring to a very select group of people, some developers, etc. They do not have SysAdmin priveleges, but need to do some things occasionally.)

I've looked at
xp_cmdshell
sp_start_job
xp_sqlagent_proxy_account

but the help on these items didn't help me much (or confused me more!)

this fails if they try to:
exec master..xp_cmdshell 'h:filesvendeelftp.bat'
or try to run a DTS that does it

Any ideas?

Thanks
Michael

View Replies !   View Related
Grant All Rights On All Db Objects
Is there a command that will grant all rights select, delete, update, execute
on all objects in a database to a user? But not be DBO

View Replies !   View Related
Restoring Login Rights
I need to write a script to restore login rights after a nightly database restore. Any suggestions?

View Replies !   View Related
SQLAgent - Granting Rights 2 Others
How do you give permissions to other users so that they:

1) Can view jobs not created by them ( via GUI-EM )

2) Allow them to modify the job definitions

ananth_ramakrishna@acml.com

Ananth

View Replies !   View Related
SQL Server Profiler Rights To Use It
Execute permissions for xp_trace_addnewqueue (and any others stored procedures used by SQL Server Profiler ) default to members of the sysadmin fixed server role but can be granted to other users.

How can assign rights to developers to use all xp_trace... with SQL Server Profiler without going going to each stored procdure one by one

Thanks

View Replies !   View Related
Assigning Rights To User
Hi,
I want to give 'Execute' permission for all the sp to a particular user.
Any straight way of doing this then to go to each sp and give him permission for every sp.
TIA.

View Replies !   View Related
Grant Rights To Public
Can I grant rights to "public" role ( customize it). Our app uses it.

thanks,

View Replies !   View Related
System Tables Rights..
I create a new database and a new user for it and give him db_datareader,
db_datawriter and db_ddladmin roles. Other than this, Im denying permission on
select, insert, update, execute and delete on all the system tables in his
particular database. Will this denying of access to the system tables cause any
problem while his is trying to insert or update or do anyother DDL activity from
the database.
Parasu

View Replies !   View Related

Copyright 2005-08 www.BigResource.com, All rights reserved