SQL Diagnostic Manager allows you to monitor SQL Server instances without SysAdmin rights. However, these lowered permissions limit the availability of data.
The user creation scripts are detailed, as follows:
Recommended permissions on-premises
SQL Diagnostic Manager also includes a SQL script to create a new user with minimum permissions necessary for the product to function.
- Use the Find/Replace function to locate and replace all references of 'SQLdmCollectionUser' with the SQL user that is to be used for monitoring the SQL Server instance.
- Connect to the SQL Server that you want to monitor with the Admin user and run this script to create the SQL user with the recommended permissions to view the data on most of the screens of the application.
Find the RecommendedPermissionsOnPremises.sql script below: - When registering the instance in SQL Diagnostic Manager, specify the SQL account that was created through the script so that SQL Diagnostic Manager connects to the monitored instance using the newly created account.
Recommended Permissions
These are the recommended permissions on-premises:
GRANT SERVER LEVEL PERMISSIONS
/** Assign VIEW SERVER STATE Permissions to SQLdmCollectionUser **/
GRANT VIEW SERVER STATE TO [SQLdmCollectionUser]
/** Assign VIEW ANY DEFINITION Permissions to SQLdmCollectionUser **/
GRANT VIEW ANY DEFINITION TO [SQLdmCollectionUser]
/** Assign VIEW ANY DATABASE Permissions to SQLdmCollectionUser **/
GRANT VIEW ANY DATABASE TO [SQLdmCollectionUser]
GRANT ADDITIONAL XEVENTS AND TRACE PERMISSIONS
/** Assign ALTER TRACE Permissions to SQLdmCollectionUser **/
GRANT ALTER TRACE TO [SQLdmCollectionUser]
/** Assign ALTER ANY EVENT SESSION Permissions to SQLdmCollectionUser **/
GRANT ALTER ANY EVENT SESSION TO [SQLdmCollectionUser]
GRANT CREATE ANY DATABASE TO [SQLdmCollectionUser]
Minimum permissions on-premises
SQL Diagnostic Manager now includes a SQL script to create a new user with minimum permissions for the product to function.
- Use the Find/Replace function to locate and replace all references of 'SQLdmCollectionUser' with the SQL user that is to be used for monitoring the SQL Server instance.
- Connect to the SQL Server that you want to monitor with the Admin user and run this script to create the SQL user with the minimum permissions required to view the data on most of the screens of the application.
Find the MinimumPermissionsOnPremises.sql script below: - When registering the instance in SQL Diagnostic Manager, specify the SQL account that was created through the script so that SQL Diagnostic Manager connects to the monitored instance using the newly created account.