70-463 · Question #221
You are administering SQL Server Integration Services (SSIS) permissions on a production server that runs SQL Server 2012. Quality Assurance (QA) testers in the company must have permission to…
The correct answer is B. In the msdb database, add QA Tester logons to the db_ssisoperator role. D. Grant Read permission in the SSIS catalog folder, the projects, and the Environments to the. This question asks for minimum necessary privileges. The ssis_admin role (option A) is too broad - it grants full administrative control over the SSIS catalog. The db_ssisoperator role in msdb (option B) allows members to execute packages and view execution results, which…
Question
You are administering SQL Server Integration Services (SSIS) permissions on a production server that runs SQL Server 2012. Quality Assurance (QA) testers in the company must have permission to perform the following tasks on specific projects:
- View and validate projects and packages
- View Environments and Environment variables
- Execute packages
You need to grant the minimum possible privileges to the QA testers. What should you do? (Each correct answer presents part of the solution. Choose all that apply.)
Options
- AIn the SSISDB database, add QA Tester logons to the ssis_admin role.
- BIn the msdb database, add QA Tester logons to the db_ssisoperator role.
- CGrant Modify permission in the projects to the QA Tester logons.
- DGrant Read permission in the SSIS catalog folder, the projects, and the Environments to the
- EGrant Execute permission in the projects to the QA Tester logons.
- FIn the msdb database, add QA Tester logons to the db_ssisItduser role.
How the community answered
(41 responses)- A12% (5)
- B73% (30)
- C10% (4)
- E2% (1)
- F2% (1)
Explanation
This question asks for minimum necessary privileges. The ssis_admin role (option A) is too broad - it grants full administrative control over the SSIS catalog. The db_ssisoperator role in msdb (option B) allows members to execute packages and view execution results, which covers the 'Execute packages' requirement. Granting Read permission on the SSIS catalog folder, projects, and Environments (option D) allows QA testers to view projects, packages, environment definitions, and environment variable names - covering the 'view and validate' and 'view Environments' requirements. Granting Modify (option C) or Execute at the project level (option E) separately is unnecessary because db_ssisoperator already covers execution, and Read covers viewing. Options B and D together provide exactly the minimum required access.
Topics
Community Discussion
No community discussion yet for this question.