Minimum SQL Server Security Privileges for Managing Availability Groups
Summary
The minimum SQL Server security privileges for the DxEnterprise AG management account to create, failover and manage SQL Server availability groups.
Information
The DxEnterprise AG management account requires the following security roles within SQL Server in order to create, failover and manage SQL Server availability groups
note
The DxEnterprise AG management account can be a SQL Server login, a local user or a domain user. If specifying a domain user, the username must be in UPN format (i.e. user@domain).
- VIEW SERVER STATE
- VIEW DATABASE STATE
- VIEW ANY DEFINITION
- CONTROL AVAILABILITY GROUP
- ALTER ANY AVAILABILITY GROUP
- CONTROL SERVER
- ALTER ANY DATABASE
- CREATE AVAILABILITY GROUP
- CREATE CERTIFICATE
- CREATE ENDPOINT
- ALTER ANY ENDPOINT