Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Allowing user to restore backup

Author  Topic 

ChristianSyl
Starting Member

4 Posts

Posted - 2008-07-22 : 04:42:35
Hi.

This is probably a simple question for experienced SQLserver admin but for me it leaves me puzzled.

I want to grant a user the right to restore backups from the file system. The user has the role public on some databases. In order to allow the user to be able to restore backups on those databases I also given the user the role db_backupoperator.

That seems to be allowing the user to restore backups. However when I want to select the backup file from the local file system I got the following message: "The database engine service could not resolve the specific file location either the location does not exist, or the...".

I tried to enter directly the path+name of the file from the file system and I still get the same error. So it seems that the role db_backupoperator does nto allow the user to access files from the file system.

For the moment I given the user the server role sysadmin and with this role the user can now browse the file system (and restore backups). But obviously I don't want to give this user sysadmin role just in order to allow them to resotre backups...

Any help would be welcome!

Regards,

Christian

dexter.knudson
Constraint Violating Yak Guru

260 Posts

Posted - 2008-07-22 : 08:16:12
SOunds like you may need to setup windows security for the user on the local machine/folder
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-07-22 : 23:16:00
User has to be in db creator server role as well.
Go to Top of Page

ChristianSyl
Starting Member

4 Posts

Posted - 2008-07-23 : 03:41:19
quote:
Originally posted by dexter.knudson

SOunds like you may need to setup windows security for the user on the local machine/folder



I don't think that this is necessary. If I take my newly created user and I give it the server role "sysadmin" there is then no problems in accessing the file system.

So what I am looking for is a subset of the sysadmin role that would give me only the rights to access the file system.
Go to Top of Page

ChristianSyl
Starting Member

4 Posts

Posted - 2008-07-23 : 03:44:38
quote:
Originally posted by rmiao

User has to be in db creator server role as well.



I did tried that. So I given the server role dbCreator to my user and I given the role "db_backupoperator". But I still had the same problem. I.e. no access to the file system
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-07-23 : 23:53:39
You need create proxy account for user to access file system.
Go to Top of Page

ChristianSyl
Starting Member

4 Posts

Posted - 2008-07-24 : 03:17:27
quote:
Originally posted by rmiao

You need create proxy account for user to access file system.



I finally an answer that sheds some light!

Can I just do something like Grant Execute previlege to my user for browsing and reading files from the file system?
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-07-24 : 14:08:19
No, unless you put user in sysadmin role as you did. Better to use proxy account.
Go to Top of Page
   

- Advertisement -