Security question - server roles 1

[djj55]

Hello, SQL 2008 R2

The two roles:
diskadmin
Members of the diskadmin fixed server role can manage disk files.

processadmin
Members of the processadmin fixed server role can terminate processes running in an instance of the Database Engine.

For diskadmin does a user need this to output to say an .CSV file?

For processadmin does a user need this if the stored procedure rolls back?

Both would be accessed from a .NET front end.

Thank you,

djj
The Lord is my shepherd (Psalm 23) - I need someone to lead me!

 

[SQLBill]

Basically, No and No.

Diskadmin is granted ALTER RESOURCES.

The diskadmin fixed server role basically has the ability to add and remove backup devices. The list of rights is rather short:

Add member to diskadmin
DISK INIT
sp_addumpdevice
sp_diskdefault
sp_dropdevice


Processadmin is granted ALTER ANY CONNECTION, ALTER SERVER STATE

A user assigned to this role has the ability to issue the KILL command but no other rights. With the KILL command, however, the user with the processadmin role has enormous power since he or she can stop a query running within SQL Server.


-Ref:

http://www.sqlservercentral.com/articles/Administration/sqlserversecurityfixedroles/1163/

by Brian Kelly.

-SQLBill

The following is part of my signature block and is only intended to be informational.
Posting advice: FAQ481-4875

 

[djj55]

Thanks. And Thank you for the link.

djj
The Lord is my shepherd (Psalm 23) - I need someone to lead me!