-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathADMIN_Assign_DTS_Permissions.sql
116 lines (105 loc) · 3.79 KB
/
ADMIN_Assign_DTS_Permissions.sql
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
/* ==================================================================
Author......: John Ness (JohnKNess)
Date........: 09.08.2019
Version.....: 0.1
Server......: localhost (first created for)
Database....: msdb
Owner.......: -
Table.......: -
Type........: Script
Name........: ADMIN_Assign_DTS_Permissions.sql
Description.: After uncommenting one of the commented out EXEC lines
............ this script assigns the permissions to an account that
............ are required to run DTS or SSIS packages correctly.
............
............ Please run on the target computer.
............
History.....: 0.1 JKN First documented
............
............
================================================================== */
USE [msdb]
GO
CREATE USER [DOMAIN\ACCOUNT] FOR LOGIN [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
/* ===================================================================
DTS Package permissions
================================================================== */
/* ******************************************
uncomment one of the permissions (admin not on Production!!)
****************************************** */
----------------------
-- SQL Server >= 2005
----------------------
--exec sp_addrolemember @rolename='db_dtsadmin', @membername='DOMAIN\ACCOUNT' -- Admin = Enumerate All / View All / Execute All / Export All / Execute in SQL Agent / Import / Delete All / Change All
--exec sp_addrolemember @rolename='db_dtsltduser', @membername='DOMAIN\ACCOUNT' -- LtdUser = Enumerate All / View Own / Execute Own / Export Own / / Import / Delete Own / Change Own
--exec sp_addrolemember @rolename='db_dtsoperator', @membername='DOMAIN\ACCOUNT' -- Operator = Enumerate All / View All / Execute All / / / / /
GO
USE [msdb]
GO
GRANT ALTER ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT DELETE ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT INSERT ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT SELECT ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT TAKE OWNERSHIP ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT UPDATE ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT VIEW DEFINITION ON [dbo].[sysdtspackages] TO [DOMAIN\ACCOUNT]
GO
/* ===================================================================
SSIS Package permissions
================================================================== */
----------------------
-- SQL Server >= 2008
----------------------
-- exec sp_addrolemember @rolename='db_ssisadmin', @membername='DOMAIN\ACCOUNT' -- Admin = Enumerate All / View All / Execute All / Export All / Execute in SQL Agent / Import / Delete All / Change All
-- exec sp_addrolemember @rolename='db_ssisltduser', @membername='DOMAIN\ACCOUNT' -- LtdUser = Enumerate All / View Own / Execute Own / Export Own / / Import / Delete Own / Change Own
-- exec sp_addrolemember @rolename='db_ssisssisoperator', @membername='DOMAIN\ACCOUNT' -- Operator = Enumerate All / View All / Execute All / / / / /
GO
USE [msdb]
GO
GRANT ALTER ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT DELETE ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT INSERT ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT SELECT ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT TAKE OWNERSHIP ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT UPDATE ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO
USE [msdb]
GO
GRANT VIEW DEFINITION ON [dbo].[sysssispackages] TO [DOMAIN\ACCOUNT]
GO