question

Wilfred van Dijk avatar image
Wilfred van Dijk asked

how to grant read access on a snapshot database (which is from a mirror)

Hi, The following situation: We have database A as a principal on sever S1. This database is mirrored to server S2. We create a snapshot on server S2 for this database (let's call this database B) For reporting purposes, I want to have user U1 read access to database B (role db_reader). But since database B is read only, it seems to be impossible. I already tried to create user U1 on server A and recreated snapshot B, but that doesn't seem to work either. Am I doing something wrong or is this not possible?
securitydatabase-mirroringdatabase-snapshot
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Fatherjack avatar image
Fatherjack answered
The database is READ_ONLY so everyone will access it as read only, despite what their permissions are in the production database. There is no need to set a user to read only in this case.
7 comments
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Wilfred van Dijk avatar image Wilfred van Dijk commented ·
ok, but I cannot map him to the snapshot: (failed to update database "B" because the database is read-only.
0 Likes 0 ·
Fatherjack avatar image Fatherjack ♦♦ commented ·
Ah, got it. It's a 'new' user just to access the snapshot ... can they not be added to the production database?
0 Likes 0 ·
Wilfred van Dijk avatar image Wilfred van Dijk commented ·
If it works, but what are the steps? these: 1) create on server S1 with readonly access on database A 2) account automatically mirrored on server S2? 3) are rights inherited to the snapshot? (after a recreate)
0 Likes 0 ·
Fatherjack avatar image Fatherjack ♦♦ commented ·
That's what I'd expect. Not tried it here as we have mirror for HA and log shipping for OLAP. Can easily be reversed out if it isnt what you need.
0 Likes 0 ·
Fatherjack avatar image Fatherjack ♦♦ commented ·
What authentication are the production/snapshot instances using? Just wondering if you could create a user in the database on prod but prevent them connecting with a server level deny and then allow it on the snapshot. If you are concerned about incorrect/improper connection.
0 Likes 0 ·
Show more comments

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.