Search
Active

8
Sign in to vote
0
Sign in to vote
Sign in
to vote
Type: Suggestion
ID: 508137
Opened: 11/4/2009 4:04:13 AM
Access Restriction: Public
0
Workaround(s)
In the enviornment I'm currently working in, a few (non DBA) teams have various SQL Agent jobs that they are responsible for the management of. They frequently need to update jobs steps or schedules, run jobs, view history...etc.

When the teams are in SQLAgentOperatorRole they can do most of the things that they need to apart from editing the jobs.

To get round this we have setup a SQL login that owns the jobs the manage and they open a seperate connection using this login to edit the jobs. The only other way to allow this functionaility that I could think of was to give them sysadmin & I'm not prepared to give this permission out to non DBA's.

If a job could be owned by a Windows group (i.e. the non DBA teams group), then they could edit their own jobs without requiring the SQL login (& seperate connection) or sysadmin membership
Details (expand)
Product Language
English

Category

SQL Engine
Proposed Solution
If a job could be owned by a Windows group (i.e. the non DBA teams group), then they could edit their own jobs without requiring the SQL login (& seperate connection) or sysadmin membership
Benefits
Improved Administration
Improved Security
Other Benefits
 
File Attachments
0 attachments
Sign in to post a comment.
Posted by ntxdba on 11/5/2009 at 2:03 PM
The problem is not about configuring the right security for Agent. The issue is that SQL Server Agent should not be used for non-SQL Server related activity. Please consider splitting out SQL Server agent as an independent OS resource connected to the Windows platform (whether SQL is installed or not). It seems all the components are now there for the OS, now there is just need for a decent UI and a suitable backend.
Posted by Microsoft on 11/11/2009 at 9:50 AM
Thank you for reporting this issue - we are considering enhancing Agent's security Model in SQL11 and we will consider this request.

Thanks,

Amy Lewis