Safe/Minimum permissions

DevOpsFTW

Hi,

We are attempting to use DLM Automation on our TeamCity server using a separate SQL server for the temporary database.
Initially this was failing as DLM would try to set "trustworthy" on since the service account was not an administrative account.

I've since spoken with our central DBAs and investigated this settings. We are not happy giving the CI service account such elevated permissions since it presents such a large security problem.

What are the minimum permissions for SQL account which "Redgate DLM Automation Build" is using?
Specifically, I want to avoid giving the user sysadmin permissions.

Thanks in advance!

Sergio R

Hi,

As a rule of thumb DLM Automation requires the same permissions as SQL Compare: https://documentation.red-gate.com/sc13/requirements/permissions-required-to-use-sql-compare

However if you set a Temporary Server but not a Temporary Database then it attempts to create a Temporary Database and SET TRUSTWORTHY ON which requires sysadmin.

The workaround in this case would be to pre-create a blank Temporary Database and then set DLM Automation to use that DB.

Thank you,