0

I will be changing the existing SQL Server Service accounts from the default to Domain accounts from the SSCM which i believe will set all the required permission. One thing I am not sure whether the service account needs to be added as database logins and if so what are the minimum permission needed.

2
  • Unless you have some specific task with that login, it does not needs to be added as login into SQL Server. – Shanky Jun 1 '20 at 14:41
  • Thank you for the clarification... – SQL_NoExpert Jun 1 '20 at 14:45
2

If you're changing the SQL Server Agent Service, make sure you observe this orientation about SQL Server Role Membership from the doc:

The account that the SQL Server Agent service runs as must be a member of the following SQL Server roles:

  • The account must be a member of the sysadmin fixed server role.
  • To use multiserver job processing, the account must be a member of the msdb database role TargetServersRole on the master server.

Also, the Configure Windows Service Accounts and Permissions doc should give you information about each SQL Server Service.


You already mentioned you're going to use SSCM to do the change, but since it could be useful to others, I believe it's worth mentioning that it's recommended to use the SQL Server Configuration Manager to Change the Service Startup Account instead of services.msc. Pinal Dave's article explain a few reasons for Why to Use SQL Server Configuration Manager Over Services applet (services.msc)?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.