Monday, March 12, 2012

Permissions for EM

What permissions are needed to utilize Enterprise Manager?
Long story, but public role has all rights revoked, so I want to create a
new database role that has access to what it needs to get into the EM.As long as the user has server login priviliges, they 'should' be able to
use EM. And they will have access to any object with public
permissions -including any other db on the server that allows public access.
(Northwind and Pubs are allow Public access to everything, so they should be
removed from production servers.)
Then to access a specific db, they need to be provided access to the db, and
put in the desired role.
Arnie Rowland*
"To be successful, your heart must accompany your knowledge."
"A McGuire" <allen.mcguire@.gmail.com.invalid> wrote in message
news:u6rZf10pGHA.3584@.TK2MSFTNGP03.phx.gbl...
> What permissions are needed to utilize Enterprise Manager?
> Long story, but public role has all rights revoked, so I want to create a
> new database role that has access to what it needs to get into the EM.
>|||Note in my initial post - I had to REVOKE all permissions from the public
roles. db_securityadmin, therefore, does not have sufficient privileges any
longer to do anything, so I want to create a new database role with the
permissions needed to allow our security administrators to do their jobs,
which is creating logins, granting privs, etc.
"Arnie Rowland" <arnie@.1568.com> wrote in message
news:u1XnaK1pGHA.2292@.TK2MSFTNGP05.phx.gbl...
> As long as the user has server login priviliges, they 'should' be able to
> use EM. And they will have access to any object with public
> permissions -including any other db on the server that allows public
> access. (Northwind and Pubs are allow Public access to everything, so they
> should be removed from production servers.)
> Then to access a specific db, they need to be provided access to the db,
> and put in the desired role.
> --
> Arnie Rowland*
> "To be successful, your heart must accompany your knowledge."
>
> "A McGuire" <allen.mcguire@.gmail.com.invalid> wrote in message
> news:u6rZf10pGHA.3584@.TK2MSFTNGP03.phx.gbl...
>

No comments:

Post a Comment