ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam DP-300 All Questions

View all questions & answers for the DP-300 exam
Go to Exam

Exam DP-300 topic 3 question 43 discussion

Actual exam question from Microsoft's DP-300
Question #: 43
Topic #: 3
[All DP-300 Questions]

HOTSPOT
-

You have an Azure subscription that contains an instance of SQL Server on Azure Virtual Machines named SQLVM1 and a user named User1. SQLVM1 hosts a database named DB1.

You need to ensure that User1 can perform the following tasks on DB1:

• Create jobs.
• View all jobs.
• Modify, delete, and disable the jobs the user created.

The solution must use the principle of least privilege.

Which built-in database role should you assign to User1, and where is the role defined? To answer, select the appropriate options in the answer area.

Show Suggested Answer Hide Answer
Suggested Answer:
by Daemon69 at Jan. 21, 2023, 9:16 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Daemon69
Highly Voted 2 years, 3 months ago
Location: msdb Role: SQLAgentUesrRole
upvoted 20 times
Sr18
10 months, 1 week ago
Role: SQLAgentReaderRole this is least privilege role to see all jobs SQLAgentUserRole can only view jobs they own.
upvoted 6 times
...
...
Daemon69
Highly Voted 2 years, 2 months ago
Location: msdb Role: SQLAgentOperatorRole • Create jobs. • View all jobs. • Modify, delete, and disable the jobs the user created.
upvoted 13 times
...
bingomutant
Most Recent 6 months, 4 weeks ago
agree with sr18 , userrole can only view jobs whereas ReaderRole can satisfy the requirements
upvoted 1 times
...
bsk1983
1 year, 8 months ago
Tested it and answer is correct, msdb, SQLAgentReaderRole, because 2nd option view all jobs is only available if account has SQLagentReaderole and higher (operator) so, with minimum privilege as requirement, Answer is msdb, SQLagentReaderRole
upvoted 7 times
...
U_C
2 years ago
The answer is correct. SQLAgentUesrRole can not view all jobs. Gosan is right!
upvoted 6 times
...
Gocsan
2 years, 1 month ago
Based on the table here https://www.youtube.com/watch?v=rodn5MSeiuY at 0m:40s and using the principal of least privilege, the answer should be SQLAgentReaderRole. SQLAgentUserRole cannot view all jobs, it can only view own jobs. Although both SQLAgentReaderRole and SQLAgentOperatorRole can create/modify/delete own jobs, the next thing to consider here is that the user must be able to disable its own job. SQLAgentReaderRole can disable own job, where SQLAgentOperatorRole can disable all jobs. Using the principal of least privilege, the answer is SQLAgentReaderRole.
upvoted 8 times
...
KingChuang
2 years, 2 months ago
Localtion:msdb Role:SQLAgentReaderRole (Because question request "view all jobs". SQLAgentUserRole only view owned jobs)
upvoted 3 times
KingChuang
2 years, 2 months ago
Ref: https://learn.microsoft.com/en-us/sql/ssms/agent/sql-server-agent-fixed-database-roles?view=sql-server-ver16#sqlagentreaderrole-permissions
upvoted 1 times
CloudTech@2023
2 years, 2 months ago
owned jobs only is for ReaderRole & nor for User Role - is it right?
upvoted 1 times
...
...
CloudTech@2023
2 years, 2 months ago
owned jobs only >> for ReaderRole & not for UserRole - is it right? so i consider that SQLAgentUserRole is the right answer
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago