How can we help you today? How can we help you today?

Error 880: BACKUP DATABASE permission denied in database

Hi All,

I am evaluating SQL Backup Pro and getting this error during backup:
Error 880: BACKUP DATABASE permission denied in database: (Tfs_configuration)

Two questions for you:

1) Security: we are changing admin server password periodically, will this be a problem for SQL backup Pro?

2) What user type/privileges is the best for SQL backup tool?

Thanks,

Alberto
devdept
0

Comments

14 comments

  • Chris.Allen
    Hi Alberto,

    this should be the best resource for you:

    http://www.red-gate.com/supportcenter/c ... 0710000173



    In general- changing your 'admin' password will not affect the SQL backup agent.

    I always default to running the SQL Backup agent as Local System.
    Chris.Allen
    0
  • devdept
    Thanks Chris,

    I'll check it and let you know.

    Alberto
    devdept
    0
  • devdept
    Hi Chris,

    I gave a look to the article you linked. By the way I am doing the backup of several databases at once and only one is failing with the error above.

    Wouldn't this mean that so far privileges are good enough?

    Thanks,

    Alberto
    devdept
    0
  • Chris Auckland
    Thanks for your reply.

    That would indicate that the user that initiates the job doesn't have permission to backup that particular backup.

    If the job is started by the SQLAgent, check that the logon account for the SQLAgent service has permissions to backup the database in question.

    Can you backup the database manually using the SQL Backup UI?
    Chris Auckland
    0
  • devdept
    No, even from UI I get the same error.

    What I really would like to see, it would be a small movie that teaches how to build the perfect domain user + SQL server login for SQL Backup Pro. In the documentation provided you assume that end-user are all sys admins and this is not always like that.

    In addition, SQL Backup Pro, after a periodic password change was not doing scheduled backup anymore because the SQL Server Agent was stopped. I think you should notify this.

    Thanks,

    Alberto
    devdept
    0
  • Chris Auckland
    This is actually something that people have been requesting for a while, but unfortunately we don't have any plans to change the way it works at the moment.

    There is a workaround you can use to allow non sysadmin users to backup. See the following topic:
    http://www.red-gate.com/MessageBoard/vi ... 7970#27970

    We don't have any useful training videos for setting up service rights (which we probably should). However, where 3rd party SQL Server backup tools are concerned, they mostly all leverage a SQL Server virtual device, and in order to create a virtual device, the account needs to be a member of the sysadmin fixed server role. We can't really get around it, so you don't really get a lot of choices with regards to the types of account you can use for the services.

    The logon account for the UI or the SQLAgent service will be 'users' for the job, so they should be able to be non sysadmins. I apologize that isn't possible with SQL Backup, but the workaround should hopefully help.
    Chris Auckland
    0
  • devdept
    After changing the user as for the link provided (http://www.red-gate.com/supportcenter/c ... 0710000173 ) now I get:

    SQL Backup could not access [HKEY_LOCAL_MACHINE\SOFTWARE\Red Gate\SQL Backup\BackupSettingsGlobal(LOCAL)] running as user [backup]

    What do I need to do?

    Thanks,

    Alberto
    devdept
    0
  • Chris Auckland
    I believe that means you need to make sure the logon account for the SQL Backup agent has permissions to that key.

    If you open up regedit on the server, you should be able to find the key. I suggest granting full access for the SQL Backup agent logon account to BackupSettingsGlobal.

    I hope this helps.
    Chris Auckland
    0
  • devdept
    Done Chris, thanks for your help. I am backing-up now. Let's see what happens.

    The "Ingenuos Simple Tools" slogan should not involve these permission issues. :)
    devdept
    0
  • Chris Auckland
    That's great. Maybe we should rebrand to 'ingenuinely simple' :)
    Chris Auckland
    0
  • devdept
    Please consider this issue solved. We will proceed with the purchase.
    devdept
    0
  • devdept
    Hi Chris,

    Unfortunately, even following all your suggestions (user (x), login(y), logon as service privilege, registry edit, etc.)

    This morning I still get this notification. Nothing has changed.

    What else should I check?

    Thanks,

    Alberto


    ERRORS AND WARNINGS


    10/23/2013: Backing up Tfs_Configuration (differential database) to:
    10/23/2013: C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Backup\DIFF_(local)_Tfs_Configuration_20131023_000000.sqb

    10/23/2013 12:00:01 AM: Error 880: BACKUP DATABASE permission denied in database: (Tfs_Configuration)
    devdept
    0
  • devdept
    I cannot access the Zendesk ticket Chris, if I use the RG account I have no tickets inside it. If I register a new one it's the same.

    What account should I use? Do you mind associating the ticket to our RG account e-mail?

    Thanks,

    Alberto
    devdept
    0
  • Chris Auckland
    We have your Zendesk account associated with the same email address you have used for this forum. If you create your RedGateID with that same email address, you should see the tickets. Alternatively, you can just reply to the ticket instead of logging into the support portal.

    Sorry for the inconvenience.
    Chris Auckland
    0

Add comment

Please sign in to leave a comment.