RE: Bulkload account permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Yes you will have to do this on a per table basis as indicated in my example
code.

You could also add the users to the db_datareader and db_datawriter database
roles, but as you wanted to be more controlled with your security, the table
by table basis is the way to go.

"Kurt Bauer" wrote:

Thanks for the feedback, but I'm still not getting it working. Do I have to
give permissions on each table? I've been creating and giving permissions at
the database level. Below is an example of the script I use to create the
account. When I run the BulkImport, I receive the following error: "CREATE
TABLE permission denied in database 'target'."

Script to create account:
CREATE LOGIN [myuser] WITH PASSWORD=N'password', DEFAULT_DATABASE=[TARGET],
DEFAULT_LANGUAGE=[us_english], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF
GO

CREATE USER myuser FOR LOGIN myuser WITH DEFAULT_SCHEMA = TARGET;
GO

GRANT SELECT TO [myuser]
GRANT INSERT TO [myuser]
GO


"Bob" wrote:

Sorry, my mistake, bulkadmin role is for BULK INSERT operation.

I got a SQLXMLBulkLoad to work by granting only SELECT and INSERT
permissions on the target table, eg

GRANT SELECT, INSERT ON dbo.target TO user1


"Bob" wrote:

As a minimum, your user will need to be in the bulkadmin role and have INSERT
permission on the table, eg

EXEC sys.sp_addsrvrolemember @loginame = N'user1', @rolename = N'bulkadmin'
GRANT INSERT ON dbo.target TO user1


HTH
wBob

"Kurt Bauer" wrote:

I am using SQLXMLBulkLoad 4.0 to import XML files into a SQL database. I'd
like to use a specific user id and password for the connection string. For
security reasons, I'd also like to specify explicit permissions on the
account, but I haven't been able to find the correct combination of
permissions for the account to successfully execute the bulkload unless the
account is db_owner.
What permissions are required for bulkload to work correctly, or do I just
need to give the account db_owner permissions to the database?
Thanks,
Kurt Bauer
.



Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win XP Prof Limited Account
    ... Sometimes one also needs to loosen permissions in the ... take into account in future software purchasing choices. ... >>This solution is to grant that account the permissions ... > started fail if the user doesn't have admin rights. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: IIS 5.0 and ASP 2.0
    ... Where are all your GAC assemblies located? ... not have read permissions to the global assembly cache. ... ...substituting either your domain name (for a domain account) or ... How to a grant ASP.NET ...
    (microsoft.public.dotnet.framework.aspnet)