DP-300 Certification Practice Question #93

Question

You have an Azure subscription that contains an instance of SQL Server on an Azure virtual machine named SQLVM1 and a user named User1. SQLVM1 hosts a database named DB1.

You need to ensure that User1 can create a scheduled task to perform a full backup of DB1. The solution must use the principle of least privilege.

Which built-in database role should you assign to User1?

Accepted Answer

The principle of least privilege requires the minimum permissions. SQLAgentUserRole is explicitly documented as the least privileged SQL Server Agent role. It allows users to create and manage their own SQL Agent jobs including scheduled backup tasks. Multiple commenters tested this in real environments and confirmed it works. The question asks specifically about the SQL Agent role (scheduled task), not the backup permission itself.

More DP-300 practice questions