Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
scottpt
Posting Yak Master
186 Posts |
 Posted - 2004-02-03 : 15:01:10
|
| What is the minimum permissions the cluster administrative user needs? I currently have it set up as sysadm, but want to give it the minium permissions it needs to do the heartbeat. |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2004-02-03 : 16:07:33
|
| When you say system administrator, do you mean local admin? I think local admin is the minimum.Tara |
 |
|
|
scottpt
Posting Yak Master
186 Posts |
Posted - 2004-02-03 : 16:23:54
|
| I mean the system administrator databse role inside sql server. I do not want this user to have these privilages since the cluster administrator user is not controled by the DBA.I am interest in SQL permissions only not windows security. |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2004-02-03 : 16:26:42
|
| If you don't want server administrators to have SQL Server permissions, then you'll need the sysadmin privilege from the BUILTIN\Administrators group in SQL Server. You might as well remove the group altogether. A cluster administrator does not need SQL Server permissions.Tara |
|
|
|
franco
Constraint Violating Yak Guru
255 Posts |
Posted - 2004-02-04 : 05:40:26
|
| Cluster service requires a domain user account that is member of the Local Administrators group on each node of your cluster.This user account should be dedicated only to running cluster service.Should not be used by users and does not need to be a member of the Domain Admin group.Franco |
|
|
|
scottpt
Posting Yak Master
186 Posts |
Posted - 2004-02-04 : 10:21:49
|
| duggan your cluster administrator does need access to run the heart beat. If you delete BUILTIN after install, like you are supposed to, sql server will not start unless you give the cluster administrator permission to MSSQL.I you do not know what system administrator or sysadmin priviledges are in MSSQL it is time to hit the books again starting with server roles.I AM ONLY INTERESTED IN MSSQL PERMISSIONS NOT WINDOWS SECURITY. |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2004-02-04 : 12:43:12
|
| I am not mentioning Windows Security in my last post (I was in my first post because I didn't understand what you were after).And thanks for the suggestion about hitting the books. The suggestion wasn't needed though as I am very familiar with SQL Server security.The last bit of information that I gave was in relation to the BUILTIN\Administrators group INSIDE SQL Server not Windows. Just remove the sysadmin privilege from that group.Tara |
|
|
|
|
|
|
Cluster permission