sp_addlogin/sp_adduser rights

[TitleistDBA]

I have a user who wants to be able to add her own accounts to the sql server. The problem is as follows.
To execute sp_addlogin you must be an 'SA' or in the server security role. I don't mind adding this person to the sercurity role.
Once the login has been created the user needs to be added to the db role msrv_clerk.
like this exec sp_adduser 'login', 'msrv_clerk'

The problem is you must be an SA or dbo to exec the sp_adduser. I do not want to grant those rights to anybody.
Does anybody have a solution to this problem?
Thanks for the help.

http://www.acushnetcompany.com

 

[SQLBill]

Why does this person need to add users to the database? That's a DBA job for security reasons.

-SQLBill

 

[TitleistDBA]

I know, I'm the DBA and I would not have set this system up this way. This is an old system and they have had dbo rights for awhile now. They are not very happy that I have removed them. They said it would take to much time to call the helpdesk and open a ticket then wait for a DBA to add the user when they could just do it. I told them I would try to find a solution but if I couldn't they would have to go through me. ..Do you know of a solution.?

http://www.acushnetcompany.com

 

[SQLBill]

Here's a question. When they get someone new who needs a corporate login or email address, how do they obtain that? Do they create it themselves or do they "...call the helpdesk and open a ticket then wait for a[n] [admin] to add the user..."?

If I can find a way to make them happy without giving them unneeded rights, I'll post it.

-SQLBill

 

[TitleistDBA]

Thanks Bill

http://www.acushnetcompany.com

 

[Corran007]

Have you thought about creating a app that creates the login? you could assign the app sa rights then give it the ability to create it in the correct database. Make sure you change the database names to something different on thier selection list. I would also add some functionality to set up an alert or an email when one is made. Or just write a log somewhere of new ones and check it.