SQL Safe requires specific permissions and rights to successfully execute backup and restore operations. Generally, the rights of the Management Console user dictate the rights available to SQL Safe.

If you are deploying SQL Safe to a non-trusted domain , specify an account with sysadmin fixed role rights for the Management Service and Backup Agent Service accounts, and ensure that SQL Authentication is enabled on each SQL Server instance where a SQL Safe component has been installed.

Recommended permissions for trial installations

TypeRequirement

Windows Permissions

Your Windows logon account has local Administrator permissions.

SQL Server Privileges

Your Windows logon account is a member of the sysadmin fixed server role on the SQL Server instance.

 

Required permissions for production installations

AccountActionPermissions Required

Windows user account

  • Allows you to install the Backup Agent on local or remote SQL Server instances.
  • Allows you to install SQL Safe components.
  • Allows you to perform SQL Safe tasks, such as executing a backup or restore operation, using standard Windows authentication.
  • Allows you to create the SQL Safe Repository database.
  • Allows you to read and write backup files.
  • Allows you to access the SQL Safe Repository.
  • Windows administrator permission on the Management Console computer and target database server.
  • Windows administrator permission on the target computer.
  • db_owner or db_backupoperator role on each user or system database and VIEW SERVER STATE permission on the registered SQL Server instance.
  • Create Database rights on the target SQL Server instance.
  • Windows account credentials with read and write permission on the volume of share you want to write or read backup files.
  • Read and write privileges on the SQL Safe Repository database, execute privileges for stored procedures.

SQL Server login

  • Allows you to perform SQL Safe tasks, such as executing a backup or restore operation, using standard SQL authentication.
  • Allows you to create the SQL Safe Repository database.
  • db_owner or db_backupoperator role in each user or system database and VIEW SERVER STATE permission on the registered SQL Server instance.
  • Create Database Rights on the target SQL Server instance.

Management Service account

Allows the SQL Safe Management Service to access the SQL Safe Repository database.

db_owner role or the following SQL permissions on the SQL Safe Repository database:

  • EXECUTE
  • INSERT
  • SELECT
  • UPDATE
  • DELETE

Backup Service account

Allows the Backup Agent to access the SQL Server instances in your environment.

sysadmin privileges on each SQL Server instance.

MSSQLSERVER service

Allows SQL Safe XSP to read and write backup files.

Read and write permission on the volume or share you want to write or read backup files.

TSM Server

Allows you to configure TSM Server and client nodes for communication.

Administrator privileges within TSM Server.

 

SQL Safe is a high-performance backup and recovery solution for your SQL Servers. Learn more > >
  • No labels