Local permissions for NetBackup user on SQL Server

[rebarquero]

Hi everybody,

I was wondering if there is an official document or some documentation about why is necessary that a domain user created to backup SQL Server with NetBackup needs to be in the local administrator group? We're not using Local System so we created this user but need to have some evidence to our security team to get this kind of permission. I have only found the tech notes about SQL Server permissions but not about Windows server permissions for example.

Any help is welcome.

Thank you!!

[NBU35]

Check following TN, if it helps you:

http://www.symantec.com/business/support/index?page=content&id=HOWTO85432

[rebarquero]

Hi ChAmp,

Thanks for your answer.

I've been trying to understand that TN but my doubt is this: I have a domain user account (DOMAIN\NetBackup_DB). This user already has sysadmin permissions on SQL server but it hasn't access to log on to the server so what should I ask the security team to enable for that account? Does this domain account need to be member of administrator group? Or does it just need log on as a service to be able to stop/start netbackup services? Where can I find that reference in case it needs to be in the administrators group? 

[NBU35]

Hi Rebarquero

Try following and see if it works

Make DOMAIN\NetBackup_DB account as domain admin account & Start Netbackup Client & netbackup legacy netowrk service with this account. Also provide sysadmin role to this account.

Then on NBU for MSQSL : right click run as admin & put in this account's credentials and check if you are able to log in.

[inn_kam · Accepted solution]

Article URL http://www.symantec.com/docs/TECH43512

NetBackup for Microsoft SQL Server database agent: What permissions are required for the backup and restore of Microsoft SQL Server databases?

Article:TECH43512

|

Created: 2009-01-16

|

Updated: 2013-10-28

|

Article URL http://www.symantec.com/docs/TECH38369

How to troubleshoot Microsoft SQL Server database backup issues

Article:TECH38369

|

Created: 2005-01-13

|

Updated: 2013-10-27

|

[rebarquero]

Thank you ChAmp and inn_kam,

I got the answer that I was looking for in the TN 38369 (inn_kam link) more explicitly. 

Thank you for your help!!