locked
MDS 2016 - How to reassign super user access now that [mdm].[udpSecuritySetAdministrator] is gone? RRS feed

  • Question

  • Often a user creates an MDS database without granting Administrator or Super User access to other users, then leaves the company. As a result nobody can maintain the MDS databases (and as their AD account gets disabled we can't use it either).

    In MDS 2008 R2 -> MDS 2014 Microsoft has a procedure to circumvent this issue as documented here https://msdn.microsoft.com/en-us/library/ff487048%28v=sql.120%29.aspx?f=255&MSPPError=-2147217396

    However in MDS 2016 the procedure mdm.udpSecuritySetAdministrator is no longer available. What's the Microsoft supported method of reassigning Super User now when the original super users are no longer available?


    • Edited by Cody Konior Monday, October 10, 2016 5:40 AM
    Monday, October 10, 2016 5:39 AM

Answers

  • Hi Cody,

    In MDS 2016, the new Super User function permission gives a user or group the same permissions as the Server Admin in the previous release of Master Data Services. The Super User permission can be assigned to multiple users and groups.

    In the previous release, the user who originally installed Master Data Services was the server admin, and it was difficult to transfer this permission to another user or a group.

    For the details, please refer to the Improved Security section on the link below.
    https://msdn.microsoft.com/en-us/library/ff929136.aspx

    Regards,


    Charlie Liao
    TechNet Community Support

    Tuesday, October 11, 2016 8:10 AM
  • Hi Cody,

    If you have any concerns about this feature, you can submit a feedback at http://connect.microsoft.com/SQLServer/Feedback and hope it is resolved in the next release of service pack or product.

    Thank you for your understanding.

    Regards,


    Charlie Liao
    TechNet Community Support

    Tuesday, October 18, 2016 2:26 AM

All replies

  • Hi Cody,

    In MDS 2016, the new Super User function permission gives a user or group the same permissions as the Server Admin in the previous release of Master Data Services. The Super User permission can be assigned to multiple users and groups.

    In the previous release, the user who originally installed Master Data Services was the server admin, and it was difficult to transfer this permission to another user or a group.

    For the details, please refer to the Improved Security section on the link below.
    https://msdn.microsoft.com/en-us/library/ff929136.aspx

    Regards,


    Charlie Liao
    TechNet Community Support

    Tuesday, October 11, 2016 8:10 AM
  • Charlie, this doesn't answer my question.

    In 2008 R2/2012/2014 it's possible to reassign the Administrator which *can be used* when the original Administrator AD account is no longer available. In SQL 2016 after being replaced with Super Users there is no such functionality.

    So my question is - what is the Microsoft supported method of gaining access when nobody has passed on the Super User permission?

    • Edited by Cody Konior Tuesday, October 11, 2016 8:38 AM
    Tuesday, October 11, 2016 8:32 AM
  • Hi Cody,

    If you have any concerns about this feature, you can submit a feedback at http://connect.microsoft.com/SQLServer/Feedback and hope it is resolved in the next release of service pack or product.

    Thank you for your understanding.

    Regards,


    Charlie Liao
    TechNet Community Support

    Tuesday, October 18, 2016 2:26 AM
  • Was this ever addressed?
    Thursday, October 26, 2017 12:08 PM
  • No answer was ever provided for this issue in this thread. Is there a solution to this issue? 
    Thursday, October 26, 2017 12:09 PM