TSM TDP for SQL; Create a possibility to bypass the sysadmin role membership check.

Current situation: Tivoli Storage Manager checks for SQL sysadmin role membership of service account right at startup instead of checking for specific permissions needed for backup / restore. When SQL sysadmin role membership is not in place, the product quits with an error.


Enhancement: Create a possibility to bypass the sysadmin role membership check.    Do this by:<br /><br />- making the specific SQL security role that is checked configurable, <br />OR<br />- make it configurable to disable this check.<br /><br /><br />Future situation:    Tivoli Storage Manager can be configured to check for an alternative, user defined role, instead of the standard, builtin “sysadmin” role.    This role should be configured by the customer to grant sufficient access to the databases. <br /><br />Alternative situation: This check can be disabled by a configuration setting.    Result: The product will start without checking sysadmin role altogether.    The product will fail to backup / restore specific databases, when insufficient permissions were granted.    This can be detected already in eventlogs, Tivoli logs or SQL errorlogs.    This is similar to how the product indicates a failure in case of a database being offline, in recovery mode, single user mode, corrupt, or when it is blocked by locks, or when the database is part of a replication set, mirror set or the like.    All these known situations are handled in a normal way (no exceptions occur, but a known error is thrown and logged).<br /><br /><br />Justification: It is not recommended to use sysadmin for backup / restore tasks.    Specific backup operator roles should be used.<br /><br /> <br />Impact if not fixed: the backup account requires SQL permissions that could be misused to grant other accounts access to databases.    This is a security breach.    We have high profile external customers and are forced to adhere to security policies.    Loosing one customer because of a security breach will have a major impact to our business.