SQLAgentUserRole

E937625

SQL Server security role fixed database role

SQLAgentUserRole is a fixed database role in SQL Server that grants limited permissions for users to view and manage their own SQL Server Agent jobs without full administrative rights.

Jump to: Surface forms Statements Referenced by

Observed surface forms (1)

Surface form	Occurrences
SQL Server database roles	1

Statements (46)

Predicate	Object
instanceOf	SQL Server security role ⓘ fixed database role ⓘ
appliesTo	SQL Server Agent jobs NERFINISHED ⓘ
availableSince	SQL Server 2000 NERFINISHED ⓘ
belongsToSecurityCategory	database-level roles ⓘ
canBeDropped	false ⓘ
canHaveMembers	true ⓘ
configuredBy	ALTER ROLE ... ADD MEMBER statement ⓘ sp_addrolemember stored procedure ⓘ
controlsAccessTo	msdb.dbo.sysjobactivity for own jobs ⓘ msdb.dbo.sysjobhistory for own jobs ⓘ msdb.dbo.sysjobs for own jobs ⓘ
definedIn	Microsoft SQL Server NERFINISHED ⓘ
documentedIn	Microsoft SQL Server Books Online NERFINISHED ⓘ
doesNotGrantPermission	control SQL Server Agent service ⓘ manage SQL Server Agent alerts ⓘ manage SQL Server Agent operators ⓘ manage SQL Server Agent proxies ⓘ manage SQL Server Agent schedules for other users ⓘ manage jobs owned by other users ⓘ modify SQL Server Agent server-wide settings ⓘ
grantsPermission	disable own SQL Server Agent jobs ⓘ enable own SQL Server Agent jobs ⓘ manage own SQL Server Agent jobs ⓘ receive notifications for own jobs ⓘ start own SQL Server Agent jobs ⓘ stop own SQL Server Agent jobs ⓘ view job history for own jobs ⓘ view own SQL Server Agent jobs ⓘ
hasPermissionScope	job execution ⓘ job history viewing ⓘ job ownership ⓘ
hasScope	msdb database ⓘ
hasSecurityPurpose	principle of least privilege for job management ⓘ
isFixed	true ⓘ
isMoreLimitedThan	SQLAgentOperatorRole NERFINISHED ⓘ SQLAgentReaderRole NERFINISHED ⓘ
isRecommendedFor	application users needing to run scheduled jobs ⓘ developers managing only their own jobs ⓘ
membershipControlledBy	database administrators ⓘ
partOf	msdb database ⓘ
relatedRole	SQLAgentOperatorRole ⓘ SQLAgentReaderRole NERFINISHED ⓘ
requires	user account in msdb database ⓘ
storedIn	msdb.sys.database_principals ⓘ
usedFor	delegating job management to non-administrative users ⓘ

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.

SQL Server Agent → hasFixedDatabaseRole → SQLAgentUserRole ⓘ

SSIS Catalog → securedBy → SQLAgentUserRole ⓘ

this entity surface form: SQL Server database roles