Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

RMS 9.0 not able to obtain the entire information by having read privileges on the Master database

Updated: 21 May 2010 | 1 comment
nirup.paduchuru@coair.com's picture
0 0 Votes
Login to vote

Hello,

We have given read privileges on the Master database for all the sql servers for svcbindview account.But when we try to query any server we donot obtain the entire information.

For example : When I ran a query for "server roles and members" I can see only one sa member in the result.
 But when I added 'symantecccs' in the sysadmin role and tried to run the query we got the entire list. But I hope you know that adding in the    sysadmin role is not a security recommended practice. And even in the RMS dcoumentation its mentioned that only read privileges are sufficient on the Master database.

 So is it mandatory to have administrative rights in order to obtain complete results?

Thanks,
Nirup Paduchuru

Discussion Filed Under:

Comments

BEsymc's picture
31
Jul
2009
0 Votes 0
Login to vote

Yes, you do require

Yes, you do require permissions to run this sort of queries, hence it is recommended to leave the RMS query account to be a member of sysadmin role, so that it can gather this information. You may grant it dbo role on specific databases, if you are interested in running queries specific to database. Just having read permission on master database does not give it credentials on all the objects, hence these commands would fail on SQL. YOu may try logging on to SQL with less privileged account and try querying, it would also show you same behaviour the way RMS shows.

Please mark it a solution, if this helps.

Thanks