Configure a User to Create and Manage SQL

Server Agent Jobs

This topic describes how to configure a user to create or execute Microsoft SQL Server Agent
jobs.

Before you begin: Security

To configure a user to create and manage SQL Server Agent jobs, using: SQL Server
Management Studio

Before You Begin

Security

To configure a user to create or execute Microsoft SQL Server Agent jobs, you must first add an
existing SQL Server login or msdb role to one of the following SQL Server Agent fixed database
roles in the msdb database: SQLAgentUserRole, SQLAgentReaderRole, or
SQLAgentOperatorRole.

By default, members of these database roles can create their own job steps that run as
themselves. If these non-administrative users want to run jobs that execute other job step types
(for example, SSIS packages), they will need to have access to a proxy account. All members of
the sysadmin fixed server role have permission to create, modify, and delete proxy accounts. For
more information about the permissions that are associated with these SQL Server Agent fixed
database roles, see SQL Server Agent Fixed Database Roles.

Using SQL Server Management Studio

To add a SQL login or msdb role to a SQL Server Agent fixed database role

1. In Object Explorer, expand a server.

2. Expand Security, and then expand Logins.

3. Right-click the login you wish to add to a SQL Server Agent fixed database role, and
select Properties.

4. On the User Mapping page of the Login Properties dialog box, select the row
containing msdb.
 5. Under Database role membership for: msdb, check the appropriate SQL Server Agent
fixed database role.

To configure a proxy account to create and manage SQL Server Agent job steps

1. In Object Explorer, expand a server.

2. Expand SQL Server Agent.

3. Right-click Proxies and select New Proxy.

4. On the General page of the New Proxy Account dialog, specify the proxy name,
credential name, and description for the new proxy. Note that you must create a credential
first before creating a SQL Server Agent proxy. For more information about creating a
credential, see How to: Create a Credential (SQL Server Management Studio) and
CREATE CREDENTIAL (Transact-SQL).

5. Check the appropriate subsystems for this proxy.

6. On the Principals page, add or remove logins or roles to grant or remove access to the
proxy account.