Non sysadmin Users running a job

According to BOL, only sysadmin users or owner of the job are allowed to run jobs.
I'm not too concern with viewing the jobs becuase the job will executed from sp.
How do I allow non sysadmin users to run just a certain job(s)? I cannot make all 5 users as the job owners.
Thanks
Edit: This is for SQL Server 2000. But I welcome any suggestions for SQL2008 as well.

In SQL 2005+, a new right was added to allow users to run their own jobs. However, you still need to be a sysadmin to run jobs which are not owned by you.
Tom this is not correct . A member of SQLAgentOperator role can execute local jobs even though it is not a owner of the job but this user can only create modify and delete jobs owned by him not by others.
http://technet.microsoft.com/en-us/library/ms188283.aspx
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

Similar Messages

To identify the user running the job at runtime

Hi All,
My requirement is to develop a program which need to send mail only if a particular user runs the job.
I need to read the user who runs the job at runtime, i tried with SY-UNAME but it holds the user name of the person who created the job at runtime.
Please suggest me the possible ways of identifying the user running the job at runtime.
Thanks in advance!!!
Regards,
Dinesh.

"I need to read the user who runs the job at runtime, i tried with SY-UNAME but it holds the user name of the person who created the job at runtime."
This is not true if your program/form/method is called inside the ABAP report which is executing in the batch job step. There, the active SY-UNAME is the user entered in SM36 as the job step user. It is not the user who planned/scheduled the job.
It is unclear from your description where your program is actually running. Is it another (ABAP) step belonging to the same job or is it actually some routine called within the same job step that you are checking or is it a program totally unrelated to the batch job in question (in that case, check out the other answers about TBTCO/TBTCP)
- Alex

Remove all budget entry from non-sysadmin users

Hi,
is there any non-customisation way of removing all budget entry from standard users (non-sysadmin).
I know it is simple enough to remove menus from standard menus, but is there anyway of preventing budgets being created via ADI also?
We have moved to an external budgeting system and I need to ensure that the only budget entries loaded into E-Business are from this one source.
thanks for any tips,
Robert.

In SQL 2005+, a new right was added to allow users to run their own jobs. However, you still need to be a sysadmin to run jobs which are not owned by you.
Tom this is not correct . A member of SQLAgentOperator role can execute local jobs even though it is not a owner of the job but this user can only create modify and delete jobs owned by him not by others.
http://technet.microsoft.com/en-us/library/ms188283.aspx
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

Permission to execute syslogins to non sysadmins, to list all the logins

Hi All:
How can we grant the permission to non sysadmin user to pull the report of all the existing SA's on the server.
With Sysadmin role i m able to execute the query but when non-sysadmins are running they are not getting full result what i m seeing...
The following permission already granted on master DB:
1) Readonly, View server state, Execute and select permissions
Query:
select SL.name
from syslogins SL
INNER JOIN sys.server_principals SP
ON SL.name = SP.name
where SP.is_disabled <>1 and SL.sysadmin = 1
Thanks,
Thanks, Satish Kumar. Please mark as this post as answered if my anser helps you to resolves your issue :)

VIEW ANY DEFINITION should do, although I fail to see why you need to expose this information to non-sysadmin users. See repro with an improved query below:
CREATE LOGIN yngve WITH PASSWORD = 'malmsten'
go
EXECUTE AS LOGIN = 'yngve'
go
SELECT sp.name
FROM sys.server_principals sp
WHERE sp.is_disabled = 0
AND EXISTS (SELECT *
FROM sys.server_role_members mb
JOIN sys.server_principals sp2 ON mb.role_principal_id = sp2.principal_id
WHERE mb.member_principal_id = sp.principal_id
AND sp2.name = 'sysadmin')
go
REVERT
go
GRANT VIEW ANY DEFINITION TO yngve
go
SELECT sp.name
FROM sys.server_principals sp
WHERE sp.is_disabled = 0
AND EXISTS (SELECT *
FROM sys.server_role_members mb
JOIN sys.server_principals sp2 ON mb.role_principal_id = sp2.principal_id
WHERE mb.member_principal_id = sp.principal_id
AND sp2.name = 'sysadmin')
go
REVERT
go
DROP LOGIN yngve
Erland Sommarskog, SQL Server MVP, [email protected]

Account is SysAdmin - but Non-SysAdmins have been denied permission to run DTS Execution job steps without a proxy account.

Hi,
I have a SQL Agent Job that executes an SSIS package. However when I manually execute the SQL Agent job from SSMS I get the following seemingly common error:
"Non-SysAdmins have been denied permission to run DTS Execution job steps without a proxy account."
However, the job owner is a member of both the SQL SysAdmin role, and also a member of the operating system's Administrators group.
The SQL Agent Service is running under Local Service (not something within my control unfortunately).
I have found many posts suggesting setting up a proxy account etc, but that seems to be for the case where the job owner is not a sys admin. To be clear, the job owner IS a sysadmin.
This is occurring in the Production environment. I have two other, seemingly identical environments that are working fine, so i am wondering if I have missed something obvious.
Any idea what I've missed?
details:
Windows Server 2008 R2 Standard
SQL Server 2008 R2 (SP2) - 10.50.4000.0 (X64) Enterprise Edition
Note - the jobs were migrated to the broken environment by scripting them from Env 1, with If exists, drop, create etc.
Thanks
Guy
Guy

Obviously, as soon as I post this I figure out the issue:
In the script i had provided for migrating the job to the new environment (to which I have no access) the DBA replaced the @owner_login_name value with a different login. The account he used does have SysAdmin privileges but for some reason
changing the account in the script did not correctly update in the job.
On opening the job in SSMS it appeared to have the correct owner account, but using GUI to look up the specific account and adding it this way, while appearing to make no difference, has in fact solved the problem.
My assumption therefore is that updating the @owner_login_name when scripting the job is not the same as actually editing the job owner itself.
Guy
Guy

RUnning sql job under non-winodws account

Hi all, I am pulling data from a source system(non-sql server) using SSIS. I am given a user name and password to connect to this system using ODBC. Can I create a sql server job and run this job under this account? This job will fail if I run it under sql
agent account. Please note that this is not a windows account.
Please advise.

...just be aware that SSIS encrypts sensitive information in the package. There are several options here, and I suppose that the situation might also have changed a bit with the new deployment model in SQL Server 2012. Just though I'd mention it, in case
this is what is causing your potential problems...
Tibor Karaszi, SQL Server MVP |
web | blog

Not able to run the job with user id - is

Hello experts,
We have problem.
Every day we run the job.
( the job contians two programs called ZTIBCOPRG and J_5HJSTP )).
I would like to know why the above job is running with the user ID TIBCOADM. Because this user has German settings for the size conversion in program ZTIBCOPRG and we are having some issues.
We changed the user to TIBCOUSA and the job would not run.
We have changed the user back to TIBCOADM. It is running.
KINDLY HELP ME WITH YOUR VALUABLE inputs. YOUR HELP WILL BE HIGHLY APPRECIATED.
I have checked for both users in AGR_USERS table.
The AGR_USERS is the old user and have many roles compared to userid TIBCOUSA.
WHERE WE NEED TO SEE . IS it authorisation problem or the other user with whom unable to run the job ?
or is this the error in the program ZTIBCOPRG which is not able to do size conversion and causing some issues.
Thanks and Regards,

Hi,
after running the job with user id TIBCOUSA, it should be in cancelled state as per your comments.
you just select the cancelled job and type JDBG in command box and enter it takes you to Debug mode.
There you may get some information where it is failing.
Sudheer. A

Running VMware Server 2 services as a non-root user

Hello,
I have switched from VirtualBox to VMware Server 2 on my Arch64 server and the transition has been relatively painless. I am at the point now where I want to run VMware's services as a non-root user account (I have a service account called "svc-vmadmin" that I'd like to use). I'm generally not comfortable running services as root, but at the same time I'm conscious of the time and effort required vs. overall benefits.
I've done the usual Google searches and even checked the VMware Server 2 user guide and the VMware community, but I can't find specific details on how to achieve this.
Is this even plausible in a Linux environment? I used to run VMware Server 1 under the SYSTEM account on Windows Server, so I'm hopinga similar thing can be done on Arch.
I would greatly appreciate any information or personal experience that fellow Archers can share.
Thanks,
Thom

System services are handled by launchd.
If you look in /System/Library/LaunchDaemons/ you'll see a plist file for each service including org.isc.named.plist, the plist for named.
If you edit this file you'll see it's an XML document that describes the service and how the OS should handle it, including the part:
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/named</string>
<string>-f</string>
</array>
Just append another entry in the array that says <string>-u nobody</string> (or whatever username you want to run as.

Problem in running servlets over the net & in non-root user mode(FC-4)

I have installed Tomcat 5.0.28 and it is running
successfully in Fedora core 4,I wrote a servlet,to access a mysql database and it is running correctly,but when i logged
onto non-root user, when i call the servlet through the
html page i get "page not found error" .This is happening even when i do it from other system.
I thank in advance if any could help me in this case

Did you try using %20 instead of a space? I know it works for URLs...worth a shot.

ZSNES fails to run as non-root user (X BadAlloc Error) [Solved]

Recently, I noticed that ZSNES failed to start unless it was run by root. The program, when called by a non-root user, would hang after generating the error:
X Error of failed request: BadAlloc (insufficient resources for operation)
Major opcode of failed request: 153 (GLX)
Minor opcode of failed request: 3 (X_GLXCreateContext)
Serial number of failed request: 25
Current serial number in output stream: 26
Does anyone know what permissions need to be fixed to resolve this?
Though I'm not sure if it's useful, here's a backtrace of the error:
#0 0xb79eeab5 in _XReply () from /usr/lib/libX11.so.6
#1 0xb79ea10b in XSync () from /usr/lib/libX11.so.6
#2 0xb7f50cd4 in ?? () from /usr/lib/libSDL-1.2.so.0
#3 0xb7f5920a in ?? () from /usr/lib/libSDL-1.2.so.0
#4 0xb7f46e7b in SDL_VideoQuit () from /usr/lib/libSDL-1.2.so.0
#5 0xb7f1d7dd in SDL_QuitSubSystem () from /usr/lib/libSDL-1.2.so.0
#6 0x082f6994 in ?? ()
#7 0xb7b59611 in __run_exit_handlers () from /usr/lib/libc.so.6
#8 0xb7b5969d in exit () from /usr/lib/libc.so.6
#9 0xb79f0dde in _XDefaultError () from /usr/lib/libX11.so.6
#10 0xb7f59002 in ?? () from /usr/lib/libSDL-1.2.so.0
#11 0xb79f0f16 in _XError () from /usr/lib/libX11.so.6
#12 0xb79ede8e in ?? () from /usr/lib/libX11.so.6
#13 0xb79edee7 in ?? () from /usr/lib/libX11.so.6
#14 0xb79eebe0 in _XReply () from /usr/lib/libX11.so.6
#15 0xb79ea10b in XSync () from /usr/lib/libX11.so.6
#16 0xb7f50cd4 in ?? () from /usr/lib/libSDL-1.2.so.0
#17 0xb7f54ca7 in ?? () from /usr/lib/libSDL-1.2.so.0
#18 0xb7f5ad77 in ?? () from /usr/lib/libSDL-1.2.so.0
#19 0xb7f5b3b0 in ?? () from /usr/lib/libSDL-1.2.so.0
#20 0xb7f47502 in SDL_SetVideoMode () from /usr/lib/libSDL-1.2.so.0
#21 0x082f77c4 in ?? ()
#22 0x082f5997 in ?? ()
#23 0x082f5e41 in ?? ()
#24 0x082f3ab4 in ?? ()
Thanks for any help in this matter.
Last edited by szim90 (2012-11-20 04:52:23)

May I completely change the subject and ask why you might need ZSNES specifically?
Personally I can recommend using something that is actively maintained and updated such as retroarch (wiki) combined with the snes9x-next module (the module is actively maintained).
Another good alternative is mednafen, although it does a lot more than just SNES emulation.

Cannot run privoxy as non-root user

Hi all,
I am having some problems running privoxy as a non-root user. I am not quite sure where to look as I simply get a return / exit status of 1. I didn't see what that maps to on privoxy's site. As an aside, privoxy works fine in my regular install, but in my USB thumbdrive install with AUFS overlay, that is where I am having issues. It might be a filesystem permission issue, but I don't see anything with journalctl -xn or dmesg or privoxy's logs that tells me anything.
Does anyone have any ideas what else to look for?
Thanks,
Walter

Hi,
Thanks for your reply - AUFS is a filesystem (I am running ArchLinux off of an SD card where the rootfs is squashfs with an AUFS overlay). I've had issues with it in the past which turned out to really be permission issues. I had an issue before where CUPS was unable to print because of the permissions, but it fixed itself after an upgrade.
I don't have any error messages to review to make solving the problem any easier. The only thing I verified was I took the systemd unit file and ran the same command as root and privoxy and it worked under root, but failed under privoxy.
Walter

Running as non-root user

How do I run the application server instance as non-root user on port <= 1024?
I am using Sun One Application Server 7.0
Thanks in advance
Sri.

Two options:
1) Start an instance using the root user, but configure the instance to switch to a non-root user upon startup. Use the "User" directive in the init.conf file of an instance to specify the user
http://docs.sun.com/source/816-7155-10/crinit.html#17116
You should also see the "Run As" setting of an instance in the administrative GUI.
2) Via the ndd command, you can set the smallest non-priveleged port number. See ndd documentation concerning the following setting:
tcp_smallest_nonpriv_port
Once you make the ndd setting, you can use a non-root user to listen on a port number that is equal to or greater than the value of the tcp_smallest_nonpriv_port setting.
Chris

Creating a package such that its postinstall script runs as a non-root user

The pkgmap(4) man page I have (says "Last change: 30 Apr 1999"; from SUNWman 42.6,REV=6.1) says of the owner and group fields in a pkgmap entry line:
"This field is not used for linked files or non-installable files. It is used optionally with a package information file. If used, it indicates with what [owner/group] an installation script will be executed."
The pkgmap file I get after running pkgmk on my prototype file contains a line like
    1 i postinstall 292 23672 1166416139for the postinstall script. The man page quote above suggests that if I want the script to be run with user and group fred/staff (say), I can hand-edit this line to instead be
    1 i postinstall fred staff 292 23672 1166416139However, pkgadd doesn't like this, complaining and failing thus:
    pkgadd: ERROR: bad entry read in pkgmap
        pathname=postinstall
        problem=extra tokens on input line
    pkgadd: ERROR: unable to process pkgmapFurthermore, there doesn't seem to be anything I can put in my prototype file to get these fields into the generated pkgmap. The corresponding owner/group fields are syntax errors for a package information file in a prototype file.
All this, and the wording in the Application Packaging Developer's Guide, suggest that the pkgmap man page is wrong and there isn't a way to specify a non-root user and group as which you want your package's install scripts to run.
On the other hand, the pkgadd confirmation "This package contains scripts which will be executed with super-user permission during the process of installing this package. / Do you want to continue with the installation of <PCBBserv> [y,n,?]" suggests that there might be some way to make a package such that it contains scripts which will be executed with ordinary user permissions, and thus not warrant a confirmation.
Any suggestions?
Thanks,
John

tpolich wrote:One more quick question, is rc.local run the backround or say if I asked for input would the system boot hang?
Yes, rc.local itself would hang, but if you background the process inside rc.local using the '&' symbol at the end of the command, then that command will be backgrounded and rc.local can continue.

Run Apache as non Oracle user

Hi,
I configured Apache on 10gAS to run as a non-oracle user.
I have hit this road block.
# tail -f HTTP_Server~1
07/10/06 14:41:36 Start process
apachectl is not owned by this userAfter much investigation. The following hidden file is causing the problem.
$ORACLE_HOME/Apache/Apache/bin/.apachectlThis is the file permission
# ls -ltr .apachectl
-rwsr-s-wx 1 oracle dba 32768 Aug 3 2005 .apachectlLooks like file ".apachectl" is not allowing Apache to run as non- oracle user.
I changed the onwership of ".apachectl" to the user I wish to execute Apache server as. Then I got this error:
07/10/06 15:35:06 Start process
/opt/oracle/app/oracle/product/10gAS/Apache/Apache/bin/.apachectl: Permission deniedAny help here?
Thanks

You could also make the user that starts the Apache a member of the current group. You will be capable of starting the apchaectl. Furthermore you should indeed not use apchectl or .apachectl directly.
You could better use the standalone Apache by Oracle or install in a different ORACLE_HOME the OHS with its own opmn - owner by this specific user.
cu
Andreas

Allow a windows non-administrator user to run cmd.exe as administrator without sharing administrator password with the user

I have standalone Windows 2003 and 2008 Oracle database servers (they are not in a Windows domain environment ). The Oracle DBAs can perform all their routine activities from command line with administrator privileges. For this i've to either share administrator
user password with the Oracle DBAs or add their windows login user to Administrators group. If i can give the DBA user permission to run windows command prompt without sharing administrator password, i can give them non-administrator login access to Windows
2003/2008 server. Normally when a non administrator user would try to run a program as administrator on Windows 2008, the user is prompted to input administrator username/password. Is it possible to give non-admin user access to run a program/application (cmd.exe
in this case) on Windows 2003/2008 without sharing administrator credentials with them?

With the OTORISER application I developed, normal users can run applications with admin privilege …
Otoriser is totally free ! Applications, mmc consoles, control panel cpl files can be run under admin and system context with Otoriser. Let’s say you donot want your users to be admin in their machines, but want them to run some applications with admin rights.
If this is the case then you are on the right blog.
There are two components for Otoriser. Management and client components. There are no complex implementation and no frustrating steps to be performed. Within 10 minutes you can start testing the results
After you download the setup files, install client components in the client by running it directly (or any deployment method you have), it will take about 5 seconds to install it. Then, let’s say you want your user to change system properties of the machine.
With the tool provided in Admin package produce the hash of system.cpl file and enter that hash into the group policy (details are provided in documentation). When policies are applied for that user then he or she can run that control panel applet under admin
context but donot forget that the user is still an ordinary user.
download link :
http://burakuysaler.wordpress.com/2013/02/21/with-the-otoriser-application-that-i-developed-normal-users-can-run-applications-with-admin-priviledges

Non sysadmin Users running a job

Similar Messages

Maybe you are looking for