SPShell access using cmdlet VS. database access

Question

Hi guys,
What's the recommend option to give SharePoint Shell Access for a user? Do I have to use cmdlet or is it safe to also directly give access through SQL management?  
For example I first use the cmdlet below to grant access for my user: 
Add-SPShellAdmin -UserName CONTOSO\UberAdminI know this only add user to my farm config DB and also added to the WSS_Admin_WPG local group on each server in the farm. Which is perfect.But in order to give access to other DBs I logged in to the SQL management studio and manually apply the role mapping for SharePoint_Shell_Access , SPDataAccess and WSS_Content_Applicaio_pools to the following tables for UberAdmin account:Sharepoint_AdminContentSharePoint_Service_StateIs that OK? And also do I still need to give SharePoint_Shell_Access to my content DBs ( note the UbderAdmin account is db_owner of all DBs)Any advise greatly appreciated.Balai

Answer 1

The SP_DATA_ACCESS role replaces
the db_owner role in SharePoint 2013.
SP_DATA_ACCESS database role (From TechNet)
The SP_DATA_ACCESS role is the default role for database access and should be used for all object model level access to databases. Add the application pool account to this role during upgrade or new deployments.
The SP_DATA_ACCESS role will have the following permissions:
Grant EXECUTE or SELECT on all SharePoint stored procedures and functions
Grant SELECT on all SharePoint tables
Grant EXECUTE on User-defined type where schema is dbo
Grant INSERT on AllUserDataJunctions table
Grant UPDATE on Sites view
Grant UPDATE on UserData view
Grant UPDATE on AllUserData table
Grant INSERT and DELETE on NameValuePair tables
Grant create table permission
Reference:
http://technet.microsoft.com/EN-US/library/cc678863.aspx
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.