Simple Script for Permissions Required
SternalLime626
Posts: 4 New member
I've only started using the product, but I've already noted there is a laundry list of permissions needed from both the SQL end and the Windows Server end in order to get the product working. When adding in the thought of least priv, this looks to be almost an impossible task to get right everything single time.
Has anyone created a script, or a very simple task list to execute on a server to allow the monitoring to function without providing it things like local admin / sysadmin permissions?
Has anyone created a script, or a very simple task list to execute on a server to allow the monitoring to function without providing it things like local admin / sysadmin permissions?
Tagged:
Answers
All of the privileges needed are listed on https://documentation.red-gate.com/sm/adding-and-managing-monitored-servers/preparing-for-adding-monitored-servers/permissions-required-for-monitoring-servers under the two sections "Monitoring host Windows machines without admin permissions" and under the note in the "Monitoring SQL Server instances" section talking about not being able to use sysadmin. Most of them are already in script form, though it does not have a script for the WMI namespace and DCOM Remote permissions or adding users to groups.
Kind regards,
Alex
Have you visited our Help Center?
I guess what I'm looking for is work that someone may have done as a '1-click' so to speak to do all the steps in one PS script. VS a bunch of manual running, UI clicking, etc.
Every instance I've helped someone with, their mindset is that the accounts need to run as admins, otherwise nothing works (which is obviously wrong). I think its bad that the current route most people take with the product is it needs that high of permissions, because they can't get it working otherwise.