Forum Discussion
Access to SQL Jobs
Hi,
I have several jobs in SQL Server Agent.
In the department there are 3 people who need administration access to the jobs. What kind of security access must they have? They already have SQL Agent Operator, SQL Agent Reader and SQL Agent User.
As far as I know you can only edit jobs where you are the Owner.
But, all 3 people must be able to edit all jobs.
How to solve that issue?
3 Replies
In msdb, there are 3 fixed roles related to sql agent and none of them can edit the jobs.
Solution: You can use shared job owner.
Create a shared login
Assign all the jobs to that shared owner
All your 3 DBAs should have SQLAgentOperatorRole permission.
There's no way to give multiple accounts edit permissions on a SQL Server agent job in SQL Server.
There's only the owner of the job, and accounts with sysadmin.
In order to give multiple users edit access to a job, you really need the job to exist in external source control with a deployment pipeline to SQL Server.
If the user can run the SQL job manually but the application cannot, it usually means the app’s service account doesn’t have the required SQL Agent permissions. SQL Agent jobs don’t run under the user who triggers them, they run under the SQL Agent service account or a proxy. Make sure the account your application uses has rights to msdb, specifically membership in roles like SQLAgentOperatorRole or a properly configured SQL Agent proxy. Once the correct permissions or proxy credentials are assigned, the application should be able to start the job without issues.
