User creation scripts

SQL Diagnostic Manager allows you to monitor SQL Server instances without SysAdmin rights. However, these lowered permissions limit the availability of data.

The user creation scripts are detailed, as follows:

• Recommended permissions for Azure
• Recommended permissions for Azure replication mirroring
• Recommended permissions on premises
• Recommended permissions on premises replication mirroring

Recommended permissions for Azure

SQL Diagnostic Manager now includes a SQL Script to create a new user for Azure SQL Database Standard and Basic Tier with the minimum and necessary permissions for the product to function. Also, includes additional permissions that are required for trace and xevent manipulation.

1. Use the Find/Replace function to locate and replace all references to 'SQLdmConsoleUser' with the name of your SQLdm User.
2. Connect to the SQL Server that is hosting your SQLdm Repository database and execute the script found under the name of RecommendedPermissionsAzure.sql in the following path:
     C:\Program Files\Idera\Idera SQL diagnostic manager\User Creation Script

RecommendedPermissionsAzure.sql

---------- RECOMMENDEDPERMISSIONSAZURE.SQL
/*----------------------------- Idera SQL diagnostic manager -------------------------------
**
**    Copyright Idera, Inc. 2005-2012
**        All rights reserved
**
**------------------------------------------------------------------------------------------
**
**    Description: SQL script to create new user for Azure SQL Database Standard and Basic Tier with minimum permissions necessary for the product to function and additional permissions required for trace and xevent manipulation
**
**------------------------------------------------------------------------------------------
**
**    Instructions: 
**        1. Use the Find/Replace function to locate and replace all references to 
**            'SQLdmConsoleUser' with the name of your SQLdm User.
**        2. Connect to the SQL Server that is hosting your SQLdm Repository database and 
**            execute this script.
**    
**------------------------------------------------------------------------------------------
*/
 
USE [master]
GO

/* For security reasons the login is created disabled and with a random password. */
/****** Object:  Login [SQLdmConsoleUser]    Script Version: 10.3            ******/
CREATE LOGIN [SQLdmConsoleUser] WITH PASSWORD=N'eAP3rYMLRCtCAWKh6mqDgGIuaaS8Umqm1Go0xCGD6GU=', DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english], CHECK_EXPIRATION=ON, CHECK_POLICY=ON
GO

ALTER LOGIN [SQLdmConsoleUser] DISABLE
GO

/****** GRANT SERVER LEVEL PERMISSIONS******/

/** Assign VIEW SERVER STATE Permissions to SQLdmConsoleUser **/
GRANT VIEW SERVER STATE TO [SQLdmConsoleUser]

/** Assign VIEW ANY DEFINITION Permissions to SQLdmConsoleUser **/
GRANT VIEW ANY DEFINITION TO [SQLdmConsoleUser]

/** Assign VIEW ANY DATABASE Permissions to SQLdmConsoleUser **/
GRANT VIEW ANY DATABASE TO [SQLdmConsoleUser]

/** Assign VIEW DATABASE STATE Permissions to SQLdmConsoleUser **/
GRANT VIEW DATABASE STATE TO [SQLdmConsoleUser]



/****** GRANT ADDITIONAL XEVENTS AND TRACE PERMISSIONS******/

/** Assign ALTER TRACE Permissions to SQLdmConsoleUser **/
GRANT ALTER TRACE TO [SQLdmConsoleUser]

/** Assign ALTER ANY EVENT SESSION Permissions to SQLdmConsoleUser **/
GRANT ALTER ANY EVENT SESSION TO [SQLdmConsoleUser]



GO

Recommended permissions for Azure replication mirroring

Also, it includes a SQL Script to create new user for Azure SQL Database Standard and Basic Tier with minimum and necessary permissions for the product to function. This script has additional permissions required for trace, xevent manipulation, mirror, and replication.

1. Use the Find/Replace function to locate and replace all references to 'SQLdmConsoleUser' with the name of your SQLdm User.
2. Connect to the SQL Server that is hosting your SQLdm Repository database and execute this script.
   You can find this script under the name of RecommendedPermissionsAzureReplicationMirroring.sql in the following path:
     C:\Program Files\Idera\Idera SQL diagnostic manager\User Creation Scripts

Recommended permissions on premises

SQL Diagnostic Manager now includes a SQL Script to create a new user with the minimum and necessary permissions for the product to function. Additionally, it includes permissions that are required for trace and xevent manipulation.

1. Use the Find/Replace function to locate and replace all references to 'SQLdmConsoleUser' with the name of your SQLdm User.
2. Connect to the SQL Server that is hosting your SQLdm Repository database and execute the script found under the name of RecommendedPermissionsOnPremises.sql in the following path:
     C:\Program Files\Idera\Idera SQL diagnostic manager\User Creation Scripts

Recommended permissions on premises replication mirroring

Also, it includes a SQL Script to create new user with minimum and necessary permissions for the product to function. This script has additional permissions required for trace, xevent manipulation, mirror, and replication.

1. Use the Find/Replace function to locate and replace all references to 'SQLdmConsoleUser' with the name of your SQLdm User.
2. Connect to the SQL Server that is hosting your SQLdm Repository database and execute this script.
   You can find this script under the name of RecommendedPermissionOnPremisesReplicationMirroring.sql in the following path:
     C:\Program Files\Idera\Idera SQL diagnostic manager\User Creation Scripts