Error Adding Server

• 
  I'm David -- a software developer on the DLM Dashboard team.
  
  This issue can occur if the user account you enter in the DLM Dashboard interface doesn't have sufficient permissions to check that the objects are installed correctly. Can you please try again with an account with more permissions. Thanks

  DavidRG June 16, 2015 05:51

  - 0 +
• 
  Really!? "try again with an account with more permissions."
  
  What permissions do you require? Have you not heard of the LUP principle? I am not going to give it SA privileges, tell me what it needs at a minimum to run.
  
  Sorry to rant, you guys are smarter than this, I have spoken with many of you at PASS and SQL in the City events.
  
  Here is what I have so far:
  Ran the downloaded DLM Dashboard script
  Created the SQL Login DLMAdmin;
  GRANT EXEC ON dbo.RG_SQLLighthouse_WriteEvent TO DLMAdmin;
  GRANT EXEC ON dbo.RG_SQLLighthouse_ReadEvents TO DLMAdmin;
  GRANT EXEC ON dbo.RG_SQLLighthouse_WriteError TO DLMAdmin;
  GRANT VIEW ANY DEFINITION TO [DLMAdmin]
  Created the SQL USER DLMAdmin for the DLMAdmin login on the target database;
  
  Does this sound correct or is that too much access?

  CGLuttrell June 24, 2015 17:57

  - 0 +
• 
  You’re right, I should have given you more detail – apologies!
  
  Here are the minimum permissions required for DLM Dashboard to work:
  

  -- Permissions you need on SQL Server to add that SQL Server to DLM Dashboard
  USE master
  CREATE LOGIN dlmDashboard WITH PASSWORD = N'ChangeMe!'
  GRANT VIEW ANY DEFINITION TO dlmDashboard
  GO
  
  USE RedGate
  CREATE USER dlmDashboard FOR LOGIN dlmDashboard
  GRANT SELECT ON SQLLighthouse.DDL_Events TO dlmDashboard
  GO
  
  USE master
  CREATE USER dlmDashboard FOR LOGIN dlmDashboard
  GRANT EXECUTE ON dbo.RG_SQLLighthouse_ReadEvents TO dlmDashboard
  GO
  
  
  -- Permissions you need on a database in SQL Server to add that database to DLM Dashboard
  USE databaseName
  CREATE USER dlmDashboard FOR LOGIN dlmDashboard
  GRANT SELECT ON sys.sql_expression_dependencies TO dlmDashboard
  GO
  

  
  In addition to that, there are two optional permissions which you can grant if you need to - be careful with these!
  

  -- ONLY if you have encrypted objects
  EXEC sp_addsrvrolemember 'dlmDashboard', 'sysadmin'
  GO
  
  
  -- ONLY if you want DLM Dashboard to install the server-wide trigger
  USE master
  GRANT CONTROL SERVER TO dlmDashboard
  GO
  

  
  I hope that helps!

  DavidRG June 26, 2015 11:35

  - 0 +
• 
  Thank you David, that first script was exactly what I needed. I redid my set up with that and it all worked nicely. The second script gives too high of privileges as you mentioned and is what I was trying to avoid, I just ran the script to set up the sprocs and trigger with my admin login to avoid having to give that access to the user for the Dashboard.
  Thanks again for your help,
  Chris

  CGLuttrell June 26, 2015 12:30

  - 0 +

Add comment

Please sign in to leave a comment.