Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

SQL 2008 R2 Implementing database mirroring. Mirroring endopoints created on both partner servers (principal and mirror) and on the witness.

Was planning to GRANT CONNECT permissions on the mirroring endpoints to the domain account under which the database servers (partners and witness) are running.

Question: Why do we need to create a database server login for this domain account on each database server? The domain account should already have full priviliges on the database servers.

share|improve this question

1 Answer 1

up vote 0 down vote accepted

The requirement to create a login for the peer and grant connect permission is required only if such a permission is necessary. If the peers (and witness) run under a service account that already has the required privileges, then the grant is not technically required.

However I would recommend that, whatever you do, do it consistently. If all your DBM deployments always create a login for the peer(s) and grant connect permission on the DBM endpoint, then do it everywhere, even if not required. If you decide that the explicit logic/connect permission is not necessary, be consistent and don't add this login anywhere.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.