Wednesday, March 21, 2012

servers and permissions

Please forgive my ignorance - I'm new at this...
I have a user who needs permissions to alter properties on linked servers.
The only way I can see to do this is to grant this user's login the sysadmin
role. I really don't want to do this, as the user should not have that leve
l
of permissions on some of the local databases.
Is there a way to grant the user admin permissions on the linked servers but
not using sysadmin?
Thanks!Hi Cyd,
It depends on what they need to modify and what version of
SQL Server we're talking about.
I'm going to guess it's SQL 2000. I haven't tried this but
have you tried adding the user to the serveradmin server
role and giving permissions to sysservers in the master
database? Some of the actions when changing linked server
properties in Enterprise Manager just execute sp_configure
to allow updates to system tables and then the actions
update the sysservers table.
-Sue
On Mon, 30 Oct 2006 10:44:02 -0800, Cyd
<Cyd@.discussions.microsoft.com> wrote:

>Please forgive my ignorance - I'm new at this...
>I have a user who needs permissions to alter properties on linked servers.
>The only way I can see to do this is to grant this user's login the sysadmi
n
>role. I really don't want to do this, as the user should not have that lev
el
>of permissions on some of the local databases.
>Is there a way to grant the user admin permissions on the linked servers bu
t
>not using sysadmin?
>Thanks!|||I should have specified - it's SQL Server 2005 - my apologies...
"Sue Hoegemeier" wrote:

> Hi Cyd,
> It depends on what they need to modify and what version of
> SQL Server we're talking about.
> I'm going to guess it's SQL 2000. I haven't tried this but
> have you tried adding the user to the serveradmin server
> role and giving permissions to sysservers in the master
> database? Some of the actions when changing linked server
> properties in Enterprise Manager just execute sp_configure
> to allow updates to system tables and then the actions
> update the sysservers table.
> -Sue
> On Mon, 30 Oct 2006 10:44:02 -0800, Cyd
> <Cyd@.discussions.microsoft.com> wrote:
>
>|||You would want to look at ALTER ANY LINKED SERVER
permissions for configuration changes and ALTER ANY LOGIN
for adding or dropping security mappings.
-Sue
On Tue, 31 Oct 2006 12:01:01 -0800, Cyd
<Cyd@.discussions.microsoft.com> wrote:
[vbcol=seagreen]
>I should have specified - it's SQL Server 2005 - my apologies...
>"Sue Hoegemeier" wrote:
>

No comments:

Post a Comment