Netbackup and SQL 2005 Security on backups

[onpnt]

I have a SQL Server 2005 SP1 box that I'm using Netbackup to backup the master,model,msdb and user databases. I'm getting failures on netbackup when I do not have the netbackup domain account in the sysadmin role. Under no circumstances do I want this account in the sysadmin role so my question is what minimum requirements to I need on the db server side for backup tasks.

From my knowledge as long as I add the domain account used to the db server and grant them db_backupoperator on each of the databases, it should have no problem performing the backup calls. That is as long as it is truly just calling backup, dbcc such commands.

I thought I would ask on this topic before troubleshooting the netbackup side of things further. Unless you have had experience with netbackup prior this is on the sql server side of things.

[sub]____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done[/sub]

 

[Catadmin]

Have you tried setting it up as the db_BackupOperator in all the databases? This should get you what you want without using SysAdmin.



Catadmin - MCDBA, MCSA
"No, no. Yes. No, I tried that. Yes, both ways. No, I don't know. No again. Are there any more questions?"
-- Xena, "Been There, Done That"

 

[onpnt]

Yeah, that is exactly how I set it up. Guess I was looking for a second call on that being the case. It's really a simple thing and its frustrating that veritas is obviously doing something it shouldn't need to for simple backups.

Thanks catadmin

[sub]____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done[/sub]

 

[Catadmin]

Does the network login for this program actually have permissions to read from the shares where the database files are? What about permissions to write to the local disk where the backups are stored?

Or are you trying to write the backups to a non-local disk?



Catadmin - MCDBA, MCSA
"No, no. Yes. No, I tried that. Yes, both ways. No, I don't know. No again. Are there any more questions?"
-- Xena, "Been There, Done That"

 

[onpnt]

They shouldn't have a problem. The netbackup account is required to be a domain admin so it should be a admin on all the servers sense the domain admin is a member of the administrators group

[sub]____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done[/sub]

 

[onpnt]

I'm going to also post in the netbackup forum and see if they have something I'm missing. I read the netbackup-sql-server admin guide last night and it didn't give me much. I've read the netbackup guides before though and they can be a bit light on giving you the underlying details on things

[sub]____________ signature below ______________
The worst mistake you'll ever make is to do something simply the way you know how while ignoring the way it should be done[/sub]