Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

SQL 2008 R2 Implementing database mirroring. Mirroring endopoints created on both partner servers (principal and mirror) and on the witness.

Was planning to GRANT CONNECT permissions on the mirroring endpoints to the domain account under which the database servers (partners and witness) are running.

Question: Why do we need to create a database server login for this domain account on each database server? The domain account should already have full priviliges on the database servers.

share|improve this question
up vote 0 down vote accepted

The requirement to create a login for the peer and grant connect permission is required only if such a permission is necessary. If the peers (and witness) run under a service account that already has the required privileges, then the grant is not technically required.

However I would recommend that, whatever you do, do it consistently. If all your DBM deployments always create a login for the peer(s) and grant connect permission on the DBM endpoint, then do it everywhere, even if not required. If you decide that the explicit logic/connect permission is not necessary, be consistent and don't add this login anywhere.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.