question

Barbara Plume avatar image
Barbara Plume asked

in SQL 2005 what is the least privilege that allows a user to run Mgt. Studio database Standard database Reports?

We have a user who wants to run Standard Reports, i.e. the Disk Usage report, on his databases. We want to avoid giving the user the sysadmin role, if at all possible. Is there a specific permission or permissions that we can give that would enable him to run various reports? I might add that his databases are in their own separate instance. Thank you.

Barbara Plume

sql-server-2005securityssmsreporting
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Kev Riley avatar image
Kev Riley answered

Trying to find a definitive answer on this one is proving difficult, however most of the standard reports use DMVs, and according to BOL:

To query a dynamic management view or function requires SELECT permission on object and VIEW SERVER STATE or VIEW DATABASE STATE permission

10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

sp_lock avatar image
sp_lock answered

Initially I would try allowing the user to the dmv's.

VIEW SERVER state and VIEW DATABASE STATE.... DOH i got the "reload answers".. +1 Kev.

To tie them down you can then deny SELECT on the dmv's you dont what the user to access...

1 comment
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Kev Riley avatar image Kev Riley ♦♦ commented ·
+1 still a valid answer though!
0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.