Chat now with support
Chat with Support

Foglight for Azure SQL Database (Cartridge) 5.9.5.20 - Deployment Guide

Permissions for SQL Server databases

If you are using SQL Server®, ensure that these permissions are set.

VIEW ANY DEFINITION

VIEW SERVER STATE

ALTER TRACE

Granted for:

Tracing a Session

Deadlocks monitoring

PI Change-Tracking

Map Foglight Login to a database user*

db_datareader

db_ddladmin

CREATE USER**

Granted for:

Running DBCC commands for indexes

 

* Creation of a new user is not required if a domain group with the appropriate permissions is used.

** It's permission for SQL Server databases on Amazon RDS.

Grant Execute on these master database objects:

xp_enumerrorlogs

xp_readerrorlog

Granted for Error log monitoring

Grant Select on these msdb database objects:

log_shipping_monitor_primary

log_shipping_monitor_secondary

log_shipping_primaries

log_shipping_secondaries

log_shipping_primary_secondaries

syscategories

sysjobactivity

sysjobs

sysjobhistory

dbm_monitor_data

dbm_monitor

sysalerts

agent_datetime

Granted for Log Shipping monitoring

 

 

 

 

 

Granted for Jobs and Replication monitoring

 

 

Granted for Mirroring monitoring

 

Granted for Agent alerts and services

 

Permissions for SAP ASE databases

If using non-sa user, ensure the following:

Procedures need to be manually created on the monitored instance. This is achieved by manually downloading and running the scripts DB_Sybase_FirstRun_Scripts located under Foglight > Dashboards > Administration > Agents > Cartridges > Components for Download. Refer to the Foglight For SAP ASE Release Notes for more details.

Permissions for DB2 for LUW databases

If you are using DB2 LUW, ensure that these permissions are set.

Set Account Privileges on:

Grant Select privilege on:

Grant Execute on:

Required Monitor Switches

UOW

STATEMENT

LOCK

SORT

TABLE

BUFFERPOOL

TIMESTAMP

MON_REQ_METRICS

MON_ACT_METRICS

MON_OBJ_METRICS

 

*Should be set to at least the base level.

ADMIN_CMD

ENV_GET_PROD_INFO

DB_PARTITIONS

ENV_GET_SYS_INFO

SNAP_GET_APPL_INFO

SNAP_GET_BP

SNAP_GET_APPL

SNAP_GET_BP_PART

SNAP_GET_DBM

SNAP_GET_HADR

SNAP_GET_DBM_MEMORY_POOL

SNAP_GET_FCM_PART

SNAP_GET_STMT

SNAP_GET_LOCKWAIT

SNAP_GET_SWITCHES

SNAP_GET_STORAGE_PATHS

PD_GET_DIAG_HIST

SNAP_GET_DB_V91

ENV_GET_SYSTEM_RESOURCES

ENV_GET_SYSTEM_RESOURCES

SNAP_GET_TAB_V91

MON_GET_PKG_CACHE_STMT

MON_GET_PKG_CACHE_STMT

SNAP_GET_TBSP_V91

MON_FORMAT_LOCK_NAME

MON_FORMAT_LOCK_NAME

SNAP_GET_CONTAINER_V91

WLM_GET_SERVICE_CLASS_AGENTS_V97

WLM_GET_SERVICE_CLASS_AGENTS

SNAP_GET_DYN_SQL_V91

MON_GET_WORKLOAD

MON_GET_WORKLOAD

 

MON_GET_TABLESPACE

MON_GET_TABLESPACE

 

ENV_GET_DB2_SYSTEM_RESOURCES

ENV_GET_DB2_SYSTEM_RESOURCES

 

ON_GET_SERVICE_SUBCLASS_DETAILS

MON_GET_SERVICE_SUBCLASS_DETAILS

 

MON_FORMAT_XML_TIMES_BY_ROW

MON_FORMAT_XML_TIMES_BY_ROW

 

MON_GET_UNIT_OF_WORK

MON_GET_UNIT_OF_WORK

 

MON_GET_BUFFERPOOL

MON_GET_BUFFERPOOL

 

MON_GET_TABLE

MON_GET_TABLE

 

MON_GET_CONTAINER

MON_GET_CONTAINER

 

MON_GET_FCM_CONNECTION_LIST

MON_GET_FCM_CONNECTION_LIST

 

MON_GET_CONNECTION

MON_GET_CONNECTION

 

 

MON_GET_MEMORY_POOL

 

 

MON_GET_MEMORY_SET

 

SNAP_GET_TBSP_V91

SNAP_GET_TBSP

 

SNAP_GET_DB_V91

MON_GET_TRANSACTION_LOG

 

 

SNAP_GET_DB

DB2_GET_INSTANCE_INFO

ADMIN_GET_STORAGE_PATHS

ENV_GET_SYSTEM_RESOURCES

MON_GET_INSTANCE

MON_FORMAT_LOCK_NAME

MON_GET_PKG_CACHE_STMT

MON_GET_AGENT

MON_GET_WORKLOAD

ENV_GET_DB2_SYSTEM_RESOURCES

MON_GET_DATABASE

ADMIN_GET_STORAGE_PATHS

DB2_GET_INSTANCE_INFO

MON_GET_TRANSACTION_LOG

MON_GET_CONNECTION

MON_GET_FCM_CONNECTION_LIST

MON_GET_CONTAINER

MON_GET_TABLE

MON_GET_BUFFERPOOL

MON_GET_UNIT_OF_WORK

MON_FORMAT_XML_TIMES_BY_ROW

MON_GET_SERVICE_SUBCLASS_DETAILS

MON_GET_TABLESPACE

MON_GET_MEMORY_POOL

MON_GET_MEMORY_SET

Grant Select on these SYSIBMADM administrative views:

* For DB2 version 9.7.0.5 or later

Grant Execute on to these table functions:

Grant Select on these views:

Permissions for Azure SQL Database

Foglight for Azure SQL can be used for granting permissions on several levels.

The following sections detail the permissions that can be granted to users of Azure SQL at each level, and instruct how to manually run the grant privileges script.

The following permissions are granted at the database level:

The file used for granting permissions manually, SQLAzureGrantPrivilegesScript.sql, can be downloaded by clicking the link View script under the Instances table, accessible via either of the following methods:

In the Cartridges - Components for Download screen.
2
Open the DBSS_Azure_Permissions_User_Databases.sql file in SQL Server Management Studio (SSMS).
3
Find the Select@LoginName = ? section at the beginning of this file.
Related Documents