I need to have an AD user account with access to all databases on a specific instance of SQL Server 2008 R2, and the only thing that user will be doing is;

  • Reorganize indexes
  • Database integrity
  • Update stats

The database admin here says for this I need to give dbo access to this user on all databases; is that really true or is there a better / more secure way of giving this specific access to one user?

1 Answer 1


Create stored procedures that do these tasks for them - these can be set to execute as owner and the user account can just be granted execute rights on the stored procedures. It means they'll have to learn the interface to your stored procedures (so document them well or give them view definition rights to them also).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.