Assigning permissions and roles in SQL Server 2005/2008 databases

You must add the Vault Service account to the msdb system database, grant the required permissions to the account, and assign the database role SQLAgentUserRole to the account.

To add the Vault Service account to the msdb system database

  1. On the SQL Server computer, start SQL Server Management Studio.

  2. Select the required SQL Server.

  3. Browse to Databases > System Databases > msdb > Security > Users.

  4. Right-click Users and then click New User.

  5. In the User name box, enter a new user name.

  6. In the Login name box, enter the domain and the user name of the Vault Service account, in the form domain\user_name.

  7. Click OK.

To grant the permissions to the Vault Service account

  1. Right-click the new user that you just created, and then click Properties.

  2. Select the Securables page.

  3. Add the following msdb tables to the list of securables, and then grant Select permission for them to the Vault Service account:

    • sysjobs

    • sysjobschedules

    • sysjobservers

    • sysjobsteps

To assign the SQLAgentUserRole to the Vault Service account

  1. Browse to Databases > System Databases > msdb > Security > Roles > Database Roles.

  2. Right-click SQLAgentUserRole, and then click Properties.

  3. On the General page, click Add, and then select the Vault Service account that you have just created.