| Table of Contents |
|---|
...
- Needed for all environments (note, some of the permissions are optional depending on criteria shown beside each one).
| Role/Permission | When is this required? | Permissions |
|---|---|---|
db_ddladmin | This is required if not connecting as the database owner. | Run any Data Definition Language (DDL) command in a database. |
db_datawriter | This is required if not connecting as the database owner. | Add, delete, or change data in all user tables. |
db_datareader | This is required if not connecting as the database owner. | Read all data from all user tables. |
| db_securityadmin | This is required if grants are allowed in scripts. | Perform grants to all objects in the database. |
| db_ssisadmin | This is required if using SSIS via Datical. | SSIS: list, view, run, export all packages. Import, delete, and change all packages and package roles. |
| db_ssisltduser | This is required if using SSIS via Datical. | SSIS: list all packages; view, run, export own packages. Import packages, change and delete own packages. |
| db_ssisoperator | This is required if using SSIS via Datical. | SSIS: list, view, run, export all packages. Run all packages in SQL Server Agent. |
| VIEW DATABASE STATE | This is required for Datical operations. | Read data from dynamic management views scoped to the database. |
DATICAL PACKAGER PERMISSIONS
...
| Role | When is this required? | Permissions |
|---|---|---|
| db_backupoperator | This is required on the Reference Database if not connecting as the database owner. | Perform backups of the database. |
| dbcreator | This is required on the Reference Database Server if you are not a sysadmin or the database owner. | Perform database restores. “If the database being restored does not exist, the user must have CREATE DATABASE permissions to be able to execute RESTORE. If the database exists, RESTORE permissions default to members of the sysadmin and dbcreator fixed server roles and the owner (dbo) of the database.” “RESTORE permissions are given to roles in which membership information is always readily available to the server. Because fixed database role membership can be checked only when the database is accessible and undamaged, which is not always the case when RESTORE is executed, members of the db_owner fixed database role do not have RESTORE permissions.” |
...