Options
Safe/Minimum permissions
DevOpsFTW
Posts: 2 New member
Hi,
We are attempting to use DLM Automation on our TeamCity server using a separate SQL server for the temporary database.
Initially this was failing as DLM would try to set "trustworthy" on since the service account was not an administrative account.
I've since spoken with our central DBAs and investigated this settings. We are not happy giving the CI service account such elevated permissions since it presents such a large security problem.
What are the minimum permissions for SQL account which "Redgate DLM Automation Build" is using?
Specifically, I want to avoid giving the user sysadmin permissions.
Thanks in advance!
We are attempting to use DLM Automation on our TeamCity server using a separate SQL server for the temporary database.
Initially this was failing as DLM would try to set "trustworthy" on since the service account was not an administrative account.
I've since spoken with our central DBAs and investigated this settings. We are not happy giving the CI service account such elevated permissions since it presents such a large security problem.
What are the minimum permissions for SQL account which "Redgate DLM Automation Build" is using?
Specifically, I want to avoid giving the user sysadmin permissions.
Thanks in advance!
Answers
As a rule of thumb DLM Automation requires the same permissions as SQL Compare: https://documentation.red-gate.com/sc13/requirements/permissions-required-to-use-sql-compare
However if you set a Temporary Server but not a Temporary Database then it attempts to create a Temporary Database and SET TRUSTWORTHY ON which requires sysadmin.
The workaround in this case would be to pre-create a blank Temporary Database and then set DLM Automation to use that DB.
Thank you,
Product Support Engineer
Redgate Software Ltd
Please see our Help Center for detailed guides on how to use our tools