.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Register
 
Win Surprise Gifts!!!
Congratulations!!!


Top 5 Contributors of the Month
MarieAdela
Imran Ghani
Post New Web Links

Give non-sysadmin user access to SQL Agent Jobs

Posted By:      Posted Date: April 10, 2011    Points: 0   Category :
 

Hi, I have a situation where a group of users (domain ad group) need access to create and edit SQL Agent Jobs. The group can not be sys admin. I tried with the server role SQLAgentOperatorRole. but that doesn't give access to edit all SQL Agent Jobs, only the one that the users owns.

Thanks in advance




View Complete Post


More Related Resource Links

Restricting access to SQL Server box from using sysadmin user

  

Is there any way we can restrict a particular sys admin sql user from accessing database on the production enviornment?

There are couple of people who knew the password and keep accessing via this user in the manageemnt studio.

Is it possible to achieve thru policy management?


Errors when using Proxy/Credentials to execute SQL Agent jobs that access SSIS packages

  

Running SQL Server 2008, on Windows Server 2008.

I'm having a problem trying to execute a job.  The job has executed successfully when I configure the SQL Agent account (domain account with sysadmin permissions in the instance) as the owner/executor of the job.  However, I want to tighten down security so I'm trying to use a proxy/credential.

Here are the steps I've followed:

1) create a non-privileged SQL account called "SQLJobOwner" that owns the job.

2) create a stored credential (domain account) that has an account on the local machine where the instance resides, and has "log on as batch" permissions.

3) created a login to the instance for the domain account that is stored as a credential, and granted sysadmin permissions to the account.

3) create a new proxy called "SSISProxy", and granted access to the SSIS subsystem.

4) Added job owner "SQLJobOwner" as a principal in the SSISProxy configuration window.

5) changed the job step that executes the SSIS package to "Run as" the "SSISProxy".

 

When I execute the job, the job fails with the following error:

Unable to start execution of step 1 (reason: Could not get proxy data for proxy_id = 1).  The step failed.

In addition, I get

IE closing when user try to access the document library

  
<!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} --> IE closing (crashing) when user try to access the document library in share point site.  here we are using WSS2.0.  this problem for not accursed all the users , this problem happening on some users. 

Merge Replication: How to give read access on snapshot share to a sql account

  
Hello All, I want to give read access to an sql account(not windows account). Can it be given or not. Someone please tell. Thanks saandii777

Access to SQL Server Jobs

  
Hello folks, Would like to grant group of users ( windows logins) to CREATE / MODIFY / DELETE / SCHEDULE jobs on SQL Server 2005. But can not grant users SYSADMIN privileges. I know that by granting users SQLAgentOperatorRole, SQLAgenetReaderRole and SQLAgentUserRole the User will be able to create jobs but they will be the owner of the newly created job and other users can not MODIFY / VIEW / RESCHEDULE the jobs. Is there any way to customize permissions to windows logins to have permission to CREATE / MODIFY / DELETE / SCHEDULE jobs without granting them SYSADMIN privilages ? Appreciate your reply   Thank You Arunaroon

Access denied when user clicks refresh BDC column button

  
Access denied occurs with any non Site Collection Administrator regardless of rights.  It only occurs in this site collections, others they are able to refresh.  In this particular collection they can add a BDC column to a list, edit an item and place/resolve a value in the bdc col; but when they refresh they are given an acess denied.  Any thoughts on what they need read access to?  This goes away if I give site admin privs (dont want to do that) or give them read only access on the web application (dont want to do that either).

Access a user created class in the form code

  
Hi Dear i have a litle problem i am developing a database application. In this app i write made two projects in the same solution. 1st named BussinessData and the 2nd one has a name Database Application. in business data i have add a libary class and made its region for easily code writing. now i want to get access at that class code from the application form code. example: sum of two numbers pubic class Sum #region "Public variables" dim a,b,c as integer #end region ' seperate region for getting values #region "Properites" public property a() as integer Get  return _a Set (by val value as sender)         _a=value end property #end region 'region for sum #region "Methods" public function sum() as integer c=a+b return c end function #end region in this way i have written the code and i want to get access this class from the form code. 'button_click code for the sum sum() plz help me to solve this problem  

Task assignment to user without read access in 2007 results in no email to assignee, no warning to a

  
It appears (from observation and searching) that SP 2007 will not send a task assignment email when the assignee does not have read access for the assigned task and there is no warning when assigning a task to someone who will be unable to read it. I have not been able to find any mentions of attempting to address this quirk by either an item event listener or a workflow that would either prevent the assignment or task the originating user to fix the issue by either changing the assignment or having them added to the appropriate group.  I could see one done badly causing a cascade of tasks. The approaches that I've thought about are: Attempt to block assignment by hooking ItemAdding and ItemUpdating on the task content type.  In ItemUpdating, you could use SPListItem.DoesUserHavePermissions since the SPListItem should be there, but you'd may have check the list since I don't think SPListItem is available at that time.  I could see this causing problems when the assignment is via workflow or something that doesn't like other code interfering with its task creation. Hooking ItemAdded and ItemUpdated to assign a new task to the assigning user to either change the assignment or have the assignee added to the users with access to the site. Define a workflow which could be enabled for a list that would check if any new or modified task is assigned to users with

Problem with access to a user in AD group

  
Hi all, We are managing our security in Sharepoint (WSS 3.0) with AD groups instead of Sharepoint groups. This worked fine until now. For an unknown reason, one single user from an AD group cannot access a page (while other users from the same group can). The group is also a distribution list in AD (so it's a security group and distribution list for emails). It includes several other distribution lists such as: L-All-Corporate-Employees    L-Administration          User 1          User 2           ...     L-Accounting         User 1         ... ...   So far I never had any issue with that kind of approach,  but yesterday we published a new web part page and wanted only the corporate employees to get access to it, so I broke rights inheritance on the page and added the L-All-Corporate-Employees group with View rights. As I already said, I tested with one user from the group (let's say from the L-Administration sub-group) and it works, now I receive an email from another user (let's say from the L-Accounting sub-group) which tells me he doesn't have access... But they're all part of the L-All-Corporate-Employees group, so they should all

how i can access a user created class in form code

  
Hi Dear i have a litle problem i am developing a database application. In this app i write made two projects in the same solution. 1st named BussinessData and the 2nd one has a name Database Application. in business data i have add a libary class and made its region for easily code writing. now i want to get access at that class code from the application form code. example: sum of two numbers pubic class Sum #region "Public variables" dim a,b,c as integer #end region ' seperate region for getting values #region "Properites" public property a() as integer Get  return _a Set (by val value as sender)         _a=value end property #end region 'region for sum #region "Methods" public function sum() as integer c=a+b return c end function #end region in this way i have written the code and i want to get access this class from the form code. 'button_click code for the sum sum() plz help me to solve this problem

How to get the list of all Site Collections that a user has access to

  
Hi All, Whats the best way to get the list of all Site Collections that a user has access to, under a particular Web Application? I have about 20-30 site collectiosn under the same WebApplication, and iterating through all of them for checking if the user has permissions is a bit performance expensive. Is there any other way of doing it?  Manesh K

Creating and sharing new sharepoint site to internet, limiting user access

  
I am a new hire into an existing business as I.T. I know the networking, I know the computers. The owner now wants me to learn Sharepoint among some other things. They currently use WSS 3.0. I have been reading up on this for the last month. I think I am ready to extend the current site to make it an Internet site so the employees can login. Some other things we would like to do I have read up on and it looks like they can be done, things such as inventory tracking in collaboration with QuickBooks and creating a website / portal for clients to have a unique login on and can see the status of their jobs in custom SharePoint lists. As far as I can tell the clients need an AD account. However, apart from that I am not sure what to do. A little background.  The company has multiple clients, and we ship things out daily to those clients.  We use Sharepoint to track the status of the jobs as they progress through the stages ultimately going to delivery. There is one common page that lists all the jobs by all clients that is updated constantly. We would like to allow multiple (different) clients/logins and have a page customized for each client.  For example, you are a client and go to www.companyname.com/sharepointsite.html.  From there you would get to a portal page with a login. Once logged in you will be presented with the Shar

How to create SQL-login with permissions for view-only SQL-Agent-Jobs?

  
Could you please help me with resolving next problem: How to create SQL-login with permissions for view -only SQL-Agent-Jobs (he cannot create, modify or delete)? I am using MS-SQL-Server version: 8.00.194 In other words : how to create in version 2000 (8.00.194) the same as 'SQLAgentReaderRole ' in version 2005 (for more details see http://technet.microsoft.com/en-us/library/ms188283.aspx).

Unable to validate data in User Agent: Mozilla

  
Hi All,Thank you for advance.Error Details : User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)Message: Unable to validate data.Source: System.WebTargetSite: Byte[] GetDecodedData(Byte[], Byte[], Int32, Int32, Int32 ByRef)StackTrace:    at System.Web.Configuration.MachineKeySection.GetDecodedData(Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Int32& dataLength)   at System.Web.UI.ObjectStateFormatter.Deserialize(String inputString)OS Environment : Microsoft Windows Server 2003 Statandard x64 Edition and Service back 1Application Environment : Asp.net 2.0/C#We have lot aspx files but we are getting this error in register and login page only.I added the machineKey in web.config file reference with codeproject article (http://www.codeproject.com/Articles/43637/Weird-Error-Unable-to-Validate-Data-in-ASP-NET-web.aspx)but still i am getting the error.

Object Cache set with Portal Super User accounts. Access denied to site.

  
I have the same issue on multiple farms. In this example i'll outline this problem for a three tier farm. SharePoint web server SharePoint Application server (hosts central admin) Sql server After installation and configuration i have created two web applications (claims based auth with NTLM). https://portal.contoso.com https://mysite.contoso.com The client connects on the URLs to the web server (1st tier). All is working correctly and they can access the portal and their mysite. The log file keeps reporting that i need to configure the user accounts for the Object Chache. So, i looked up the required steps and executed these conform mcrosoft guidelines (http://technet.microsoft.com/en-us/library/ff758656.aspx) All the steps run seccesfully. But when i connect to the URL i now get an access denied (even with the administrator who is site collection administrator) In the log file i get the following to lines when i connect to the site. Unknown SPRequest error occurred. More information: 0x80070002 Unknown SPRequest error occurred. More information: 0x80070005 I have exact the same issue on two other farms. Marc

How to Access Parent Page (.aspx) control (IDs) from its child User Control (.ascx)

  
I have a parent .aspx page that has a asp:panel control in it, and this parent .aspx is also referencing a user control that I registered in that .aspx. Lets just call it usercontrolA.ascx for this post.The user control has a radiobuttonlist itself.Based on a selection from the radiotbuttonlist in the user control, I want to be able to hide the asp:panel in my .aspx (parent) but unfortunately I cant' get it to work:parentPanel.visible = true;  <<< I trried this in usercontrolA.ascx.csBut the user control doesn't know about the panel in the parent .aspxSo do I need to expose that somehow from the parent so that I can access it from the code behind of the child .ascx?  How?

change snapshot agent user (Agent security)

  
Hi, we have replicated dbon sql server 2008 (transaction replication) now we want to change the user used for the snapshot agent, from sql Managment studio go to publication property and then agent security and then snapshot agent (now we are using domain user) here we want to use the other option which is " to be run under sql server agent service account" but I couldnt choose this option because its unactive so how we can activate this option for existing replication without restarting the replication (i can use this option for the new replication wizard) Thanks
Categories: 
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend