Thursday, March 8, 2012

Backup permissions

Hi,
We use Data Protector from HP for enterprise backup solution. I don't want
that the backup team, backup SQL Server databases with a sysadmin Account.
So, i gave the HP NT Account used db_backupoperator rights in all databases.
The backup fails. I looked with profiler and i've an exception when the HP
tool tries to run dbcc showfilestats( 1 ). Why the backupoperator don't have
permissions to run dbcc ?
http://msdn.microsoft.com/library/de...ga-gz_8odw.asp
Can i grant dbcc rights on that user ?
How can i resolve my problem? i will have always a strong account outside my
scoup.
Thanks in advance,
CMLC
I have never used dbcc showfilestats. I have never even heard of dbcc
showfilestats. I could not find it within Books Online, so I am guessing
that it is one of those undocumented commands that should be used with
caution. By the way, I did find several hits when I Googled for it.
I doubt that you can grant execute rights on that DBCC. I spot checked a
few other DBCCs (that are documented within Books Online) and all of the
commands that I checked indicated that they were not transferrable.
I would encourage you to contact HP about their backup solution. Ask them
why they use an undocumented command. Also, encourage them to use standard
commands. Perhaps they could replace the DBCC call with a call to RESTORE
FILELISTONLY or RESTORE HEADERONLY.
Keith
"CMLC" <CMLC@.discussions.microsoft.com> wrote in message
news:1A38A305-4434-4CF1-BBD0-600A4D6801C4@.microsoft.com...
> Hi,
> We use Data Protector from HP for enterprise backup solution. I don't want
> that the backup team, backup SQL Server databases with a sysadmin Account.
> So, i gave the HP NT Account used db_backupoperator rights in all
databases.
> The backup fails. I looked with profiler and i've an exception when the HP
> tool tries to run dbcc showfilestats( 1 ). Why the backupoperator don't
have
> permissions to run dbcc ?
>
http://msdn.microsoft.com/library/de...ga-gz_8odw.asp
> Can i grant dbcc rights on that user ?
> How can i resolve my problem? i will have always a strong account outside
my
> scoup.
> Thanks in advance,
> CMLC
>

No comments:

Post a Comment