Page History

---------- RECOMMENDEDPERMISSIONSAZURE.SQL
/*----------------------------- Idera SQL diagnostic manager -------------------------------
**
**    Copyright Idera, Inc. 2005-2012
**        All rights reserved
**
**------------------------------------------------------------------------------------------
**
**    Description: SQL script to create new user for Azure SQL Database Standard and Basic Tier with minimum permissions necessary for the product to function and additional permissions required for trace and xevent manipulation
**
**------------------------------------------------------------------------------------------
**
**    Instructions: 
**        1. Use the Find/Replace function to locate and replace all references to 
**            'SQLdmConsoleUser' with the name of your SQLdm User.
**        2. Connect to the SQL Server that is hosting your SQLdm Repository database and 
**            execute this script.
**    
**------------------------------------------------------------------------------------------
*/
 
USE [master]
GO

/* For security reasons the login is created disabled and with a random password. */
/****** Object:  Login [SQLdmConsoleUser]    Script Version: 10.3            ******/
CREATE LOGIN [SQLdmConsoleUser] WITH PASSWORD=N'eAP3rYMLRCtCAWKh6mqDgGIuaaS8Umqm1Go0xCGD6GU=', DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english], CHECK_EXPIRATION=ON, CHECK_POLICY=ON
GO

ALTER LOGIN [SQLdmConsoleUser] DISABLE
GO

/****** GRANT SERVER LEVEL PERMISSIONS******/

/** Assign VIEW SERVER STATE Permissions to SQLdmConsoleUser **/
GRANT VIEW SERVER STATE TO [SQLdmConsoleUser]

/** Assign VIEW ANY DEFINITION Permissions to SQLdmConsoleUser **/
GRANT VIEW ANY DEFINITION TO [SQLdmConsoleUser]

/** Assign VIEW ANY DATABASE Permissions to SQLdmConsoleUser **/
GRANT VIEW ANY DATABASE TO [SQLdmConsoleUser]

/** Assign VIEW DATABASE STATE Permissions to SQLdmConsoleUser **/
GRANT VIEW DATABASE STATE TO [SQLdmConsoleUser]



/****** GRANT ADDITIONAL XEVENTS AND TRACE PERMISSIONS******/

/** Assign ALTER TRACE Permissions to SQLdmConsoleUser **/
GRANT ALTER TRACE TO [SQLdmConsoleUser]

/** Assign ALTER ANY EVENT SESSION Permissions to SQLdmConsoleUser **/
GRANT ALTER ANY EVENT SESSION TO [SQLdmConsoleUser]



GO