Does anyone know what the required (minimum) permissions Netbackup needs to backup a sql server database? Essentially is should not have more than backupoperator roles but this is not working and only a sysadmin role on the account works which isn't acceptable and a major security problem. I've checked the admin guide for netbackup 5.1 and sql server and it does not go into depth on rights required to the database level (from what I saw at a glance)
I asked this question in the sql server administration forum first to double check the rights on the db server and they have been covered for backup permissions.
Here is the original question
The netbackup domain account is a domain admin so all writes to disk should be covered. I've added the netbackup domain account to the database server as a backupoperator on all the pertinent databases.
Thanks
____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done
I asked this question in the sql server administration forum first to double check the rights on the db server and they have been covered for backup permissions.
Here is the original question
onpnt said:I have a SQL Server 2005 SP1 box that I'm using Netbackup to backup the master,model,msdb and user databases. I'm getting failures on netbackup when I do not have the netbackup domain account in the sysadmin role. Under no circumstances do I want this account in the sysadmin role so my question is what minimum requirements to I need on the db server side for backup tasks.
From my knowledge as long as I add the domain account used to the db server and grant them db_backupoperator on each of the databases, it should have no problem performing the backup calls. That is as long as it is truly just calling backup, dbcc such commands.
I thought I would ask on this topic before troubleshooting the netbackup side of things further. Unless you have had experience with netbackup prior this is on the sql server side of things.
The netbackup domain account is a domain admin so all writes to disk should be covered. I've added the netbackup domain account to the database server as a backupoperator on all the pertinent databases.
Thanks
____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done