Azure-docs: Source SQL User needs to be sysadmin

Created on 27 Dec 2018  Â·  12Comments  Â·  Source: MicrosoftDocs/azure-docs

It seems CONTROL_SERVER permissions are not enough for the credentials on the source server. DMS returns this in an error at the "Migration source detail" step:
"Provided credentials for server 'yoursourceserver' have insufficient server-level permissions to run a continuous migration. The credentials must be a member of the sysadmin server role."


Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

cxp dmsvc doc-bug triaged

All 12 comments

@J-E-C Thank you very much for bringing this detail to our attention. We are investigating this and will update the docs and/or raise this as a product bug as appropriate.

@J-E-C Per the following link (Permissions of Fixed Server Roles), CONTROL_SERVER is not quite sufficient on the source database, as indicated by the following note:

screenshot 114

Link from note: CONTROL SERVER vs. sysadmin/sa

I am going to have the content author review this workflow and update the documentation as appropriate.

@craigg-msft I am unable to assign to @pochiraju.

@J-E-C apologies for the delay. Are you still having this issue? @Mike-Ubezzi-MSFT please assign the issue to @HJToland3 I am working to finish updating the meta data.

@J-E-C, seeking additional information and will make updates appropriately based on feedback from the DMS PM. Thanks!

@craigg-msft I assigned the sysadmin role to the user on the source SQL server and the migration finished without any issue afterwards. I don't know if the sysadmin role should not be required or if it's just a matter of incorrect documentation. @HJToland3 if you need any more information from me let me know. Thanks!

Control server role should be enough, unless you have some sort of deny permissions as well. Can you please check?

@J-E-C, please see the previous comment from Raj Pochiraju. Please let us know what you find! Thanks!

@J-E-C, have you had a chance to check whether or note you have some sort of deny permissions as well? Per the PM, CONTROL SERVER role should be enough.

Hi @HJToland3 , we have since completed our migration to Azure SQL and sadly our old environment is not available anymore so I'm afraid I cannot check the permissions on that user.
However, if the "CONTROL_SERVER" role actually provides enough permissions for the specified credentials to complete the live migration I think the error message should not say "The credentials must be a member of the sysadmin server role" but instead specify which specific permission it's lacking, don't you agree?

@J-E-C, thank you for the additional feedback. I am passing this along to Raj Pochiraju and the Dev team for consideration.

We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

Favna picture Favna  Â·  3Comments

jebeld17 picture jebeld17  Â·  3Comments

bityob picture bityob  Â·  3Comments

JeffLoo-ong picture JeffLoo-ong  Â·  3Comments

mrdfuse picture mrdfuse  Â·  3Comments