Minimum Permissions Required for Proxy Account
I have a job which reads the data from a Webservice, i am using a script component and all things works well, when i execute it from the Visual studio environment. Now when i ported the same code to Test environment this script component fails with this error: "'component "SCR_SRC_GetData" (325) failed the pre-execute phase and returned error code 0x80131501. '" , when i execute the package via SQL JOB which runs the jobs with the proxy account. THough when i double click the package and execute it all things worked fine and package was executed succesfully. As a testing i think it was a security issue, i added the proxy account to the local admin group on the test machine and guess what the JOB executed successfully this time. Now this is what i want to know, what would be the minimum permissions other the ADMIN account which needs to be given to the proxy account such that the Webservice script task component can finish properly. I am guessing my user account is not able to load the .Net framwrok assemblies but now i dont know what level of user permissions or usr group can i add it to enable the same, Any thougths Abhinav http://bishtabhinav.wordpress.com/
April 30th, 2013 8:34pm

Now this is what i want to know, what would be the minimum permissions other the ADMIN account which needs to be given to the proxy account such that the Webservice script task component can finish properly. Only members of the sysadmin fixed server role have permission to create, modify, or delete proxy accounts. Users who are not members of the sysadmin fixed server role must be added to one of the following SQL Server Agent fixed database roles in the msdb database to use proxies: SQLAgentUserRole, SQLAgentReaderRole, or SQLAgentOperatorRole Regards, RSingh
Free Windows Admin Tool Kit Click here and download it now
April 30th, 2013 11:28pm

When SSIS package is executed from Visual studio it runs under your credentials. Proxy account required to access any external resources such as files, network shares, SQL servers and others. When windows authentication is selected in connection manager it is executed under proxy account. Please check external resources accessed from package and assign permission to proxy account to those resources. Local administrative privileges are excessive. Please give read data from a Webservice privilege to proxy account. It should be sufficient.
May 1st, 2013 12:09pm

Please give read data from a Webservice privilege to proxy account. It should be sufficient. Could you please elaborate on "give read data from a Webservice privilege" Just to add what i am doing: TO conenct to the webservice i am creating BINDING at runitme via the user name and password required to connect to the webservice and not depending on the identity passed via the job.Abhinav http://bishtabhinav.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
May 1st, 2013 12:14pm

Any takers for this QuestionAbhinav http://bishtabhinav.wordpress.com/
May 1st, 2013 1:19pm

It seems script component requires the temp directory for running properly, I just added the said proxy user with the read and execute permissions to the directory and all worked fineAbhinav http://bishtabhinav.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
May 3rd, 2013 12:01am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics