Permissions Required by Agents
Snapshot Agent
- The Windows account under which the agent runs is used when making connections to the Distributor. This account must be a member of the db_owner fixed database role in the distribution database and have write permissions on the snapshot share.
- The account used to connect to the Publisher must at least be a member of the db_owner fixed database role in the publication database.
Merge Agent for a Push Subscription
The Windows account under which the agent runs is used when making connections to the Publisher and Distributor. This account must:
- At least be a member of the db_owner fixed database role in the distribution database
- Be a member of the PAL
- Be a login associated with a user in the publication database
- Have read permissions on the snapshot share
The account used for connection to the Subscriber must at least be a member of the db_owner fixed database role in the subscription database.
Merge Agent for a Pull Subscription
The Windows account under which the agent runs is used when making connections to the Subscriber. This account must at least be a member of the db_owner fixed database role in the subscription database.
The account used for connection to the Publisher and Distributor must:
- Be a member of the PAL
- Be a login associated with a user in the publication database
- Be a login associated with a user in the distribution database (the user can be the Guest user)
- Have read permissions on the snapshot share
