locked
Allow users to view - but not create - jobs RRS feed

  • Question

  • I'm looking for a way to allow users to view jobs as well as SSIS and Legacy DTS packages, but that does NOT allow them to save files or create schedules.  Granting read access to msdb or even just granting SQLAgentReaderRole to the user allows them to view the files, but they are also able to create new files (which we don't want) as well as schedule jobs (which we also don't want).  Is there a way to grant them the ability to see these files while preventing them from saving new ones?
    Friday, November 7, 2014 8:13 PM

Answers

  • I found this link:  http://benchmarkitconsulting.com/colin-stasiuk/2009/01/21/creating-a-real-sqlagentreaderrole/

    It seems like we have to explicitly create a new role and add the deny execute to ensure that they are unable to create new jobs and such.  It's a little ugly, but it works.

    Saturday, November 8, 2014 12:28 AM

All replies

  • If they own the jobs then only they should be able to edit/modify/execute  etc:- jobs.

    You are good to grant SQLAgentReaderRole

    Refer the below link

    http://msdn.microsoft.com/en-us/library/ms188283.aspx

    --Prashanth

    Friday, November 7, 2014 8:19 PM
  • I don't want them to be able to edit/modify/execute ANY jobs though.  This doesn't work.
    Friday, November 7, 2014 8:24 PM
  • I found this link:  http://benchmarkitconsulting.com/colin-stasiuk/2009/01/21/creating-a-real-sqlagentreaderrole/

    It seems like we have to explicitly create a new role and add the deny execute to ensure that they are unable to create new jobs and such.  It's a little ugly, but it works.

    Saturday, November 8, 2014 12:28 AM