What are the minimun rights a user account needs to be able to call dbbackup.exe with this user?

Background is: can we have a user which can't read any data in the database but is still able to do a backup?

asked 26 Jan '21, 05:37

Martin's gravatar image

Martin
9.0k130166257
accept rate: 14%


FWIW Foxhound uses a mixture of old-school and politically-correct privileges to set up three end-user administration user ids ( they should all be upgraded but something more interesting always gets in the way :)

GRANT CONNECT TO STOPPER IDENTIFIED BY "SQL";  -- no other permissions, only used to connect via dbstop.exe

GRANT CONNECT TO BACKER IDENTIFIED BY "SQL";
GRANT BACKUP TO BACKER;
GRANT MANAGE ANY DBSPACE TO BACKER;  -- to allow dbbackup -x delete and restart transaction log

GRANT CONNECT TO VALIDATOR IDENTIFIED BY "SQL";
GRANT VALIDATE TO VALIDATOR;
permanent link

answered 26 Jan '21, 07:20

Breck%20Carter's gravatar image

Breck Carter
32.5k5417241050
accept rate: 20%

converted 26 Jan '21, 07:24

The passwords seem rather old-school, as well, rather than following the "politally-correct" v17 minimum length:)

(27 Jan '21, 03:06) Volker Barth
Replies hidden
1

You're right, that's just inviting a dbvalid vector DOS attack! :)

(27 Jan '21, 07:37) Breck Carter

With v16 and above, there's a separate BACKUP DATABASE system privilege, so assigning the privilege should do, methinks, such as

GRANT BACKUP DATABASE TO ABackupOperator;
permanent link

answered 26 Jan '21, 05:54

Volker%20Barth's gravatar image

Volker Barth
39.9k360547817
accept rate: 34%

edited 27 Jan '21, 04:13

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×84
×24
×17

question asked: 26 Jan '21, 05:37

question was seen: 641 times

last updated: 27 Jan '21, 07:37