Difference Betwenn SpDataAccess and PShellAdmin

Question

I normally use this script to give users access to run power shell scripts, in 2010 they would get SPShellAdmin and DBO in 2013 they seem to get SpDataAccess and SpShellAdmin, any difference between the two?
Add-PSSnapin Microsoft.SharePoint.PowerShell;
$username = Read-Host "Enter username";
Get-SPContentDatabase | ForEach-Object {Add-SPShellAdmin -UserName $username -database $_.Id}

Answer 1

Hi,
The SharePoint_Shell_Access role gives you access to the content databases and the configuration database, and permission to execute the stored procedures.
In order to use PowerShell, an administrator must be assigned the SharePoint_Shell_Access role on any databases against which PowerShell will be used. For example, to perform tasks that read or manipulate data in the configuration database, an administrator
must have the SharePoint_Shell_Access role for the configuration database. Likewise, to work with a specific site collection, the admin must have the SharePoint_Shell_Access role for the appropriate content database. More information:
http://sharepointpromag.com/sharepoint/tis-privilege-powershell.
The db_owner fixed database role has the CONTROL DATABASE permission. Members of the db_securityadmin fixed database role can modify role membership and manage permissions.  More information:
http://msdn.microsoft.com/en-us/library/ms189121(v=sql.105).aspx.
Per my knowledge, except that you mentioned, all application pool identity should have db_owner fixed database role for the associated services database. And the farm account also need to have db_owner role.
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support