Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Netbackup and SQL 2005 Security on backups

Status
Not open for further replies.

onpnt

Programmer
Dec 11, 2001
7,778
US
Does anyone know what the required (minimum) permissions Netbackup needs to backup a sql server database? Essentially is should not have more than backupoperator roles but this is not working and only a sysadmin role on the account works which isn't acceptable and a major security problem. I've checked the admin guide for netbackup 5.1 and sql server and it does not go into depth on rights required to the database level (from what I saw at a glance)

I asked this question in the sql server administration forum first to double check the rights on the db server and they have been covered for backup permissions.

Here is the original question
onpnt said:
I have a SQL Server 2005 SP1 box that I'm using Netbackup to backup the master,model,msdb and user databases. I'm getting failures on netbackup when I do not have the netbackup domain account in the sysadmin role. Under no circumstances do I want this account in the sysadmin role so my question is what minimum requirements to I need on the db server side for backup tasks.

From my knowledge as long as I add the domain account used to the db server and grant them db_backupoperator on each of the databases, it should have no problem performing the backup calls. That is as long as it is truly just calling backup, dbcc such commands.

I thought I would ask on this topic before troubleshooting the netbackup side of things further. Unless you have had experience with netbackup prior this is on the sql server side of things.

The netbackup domain account is a domain admin so all writes to disk should be covered. I've added the netbackup domain account to the database server as a backupoperator on all the pertinent databases.

Thanks



____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top