SQL Safe Backup requires specific permissions and rights to successfully execute backup and restore operations. Generally, the rights of the Management Console user dictate the rights available to SQL Safe Backup.
Recommended permissions for trial installations
| Type | Requirement |
|---|
Windows Permissions | Your Windows logon account has local Administrator permissions. |
SQL Server Privileges | Your Windows logon account is a member of the sysadmin fixed server role on the SQL Server instance. |
Required permissions for production installations
| Account | Action | Permissions Required |
|---|
Windows user account | - Allows you to install the Backup Agent on local or remote SQL Server instances.
- Allows you to install SQL Safe Backup components.
- Allows you to perform SQL Safe tasks, such as executing a backup or restore operation, using standard Windows authentication.
- Allows you to create the SQL Safe Repository database.
- Allows you to read and write backup files.
- Allows you to access the SQL Safe Repository.
| - Windows administrator permission on the Management Console computer and target database server.
- Windows administrator permission on the target computer.
db_owner or db_backupoperator role on each user or system database and VIEW SERVER STATE permission on the registered SQL Server instance.- Create Database rights on the target SQL Server instance.
- Windows account credentials with read and write permission on the volume of share you want to write or read backup files.
- Read and write privileges on the SQL Safe Repository database, execute privileges for stored procedures.
|
SQL Server login | - Allows you to perform SQL Safe tasks, such as executing a backup or restore operation, using standard SQL authentication.
- Allows you to create the SQL Safe Repository database.
| db_owner or db_backupoperator role in each user or system database and VIEW SERVER STATE permission on the registered SQL Server instance.- Create Database Rights on the target SQL Server instance.
|
Management Service account | - Allows the SQL Safe Management Service to access the SQL Safe Repository database.
| db_owner role or the following SQL permissions on the SQL Safe Repository database:- EXECUTE
- INSERT
- SELECT
- UPDATE
- DELETE
|
Backup Service account | - Allows the Backup Agent to access the SQL Server instances in your environment.
| sysadmin privileges on each SQL Server instance.
|
MSSQLSERVER service | - Allows SQL Safe XSP to read and write backup files.
- Allows SQL Safe to read and write backup files in native format.
- Allows SQL Safe to create temporary files for OLR operations.
| - Read and write permission on the volume or share you want to write or read backup files.
- Read and write permission on the directory specified as the Temporary Location when performing an OLR operation.
|
TSM Server | - Allows you to configure TSM Server and client nodes for communication.
| - Administrator privileges within TSM Server.
|