Which permission should you grant?

You are the database administrator for a company that hosts Microsoft SQL Server. You manage both onpremisesand Microsoft Azure SQL Database environments.

One instance hosts a user database named HRDB. The database contains sensitive human resources data.

You need to grant an auditor permission to view the SQL Server audit logs while following the principle of leastprivilege.

Which permission should you grant?
A . DDLAdmin
B . db_datawriter
C . dbcreator
D . dbo
E . View Database State
F . View Server State
G . View Definition
H . sysadmin

View Answer

Answer: F

Explanation:

Unless otherwise specified, viewing catalog views requires a principal to have one of the following: Membership in the sysadmin fixed server role.

The CONTROL SERVER permission.

The VIEW SERVER STATE permission.

The ALTER ANY AUDIT permission.

The VIEW AUDIT STATE permission (gives only the principal access to the sys.server_audits catalog view).

References: https://technet.microsoft.com/en-us/library/cc280386(v=sql.110).aspx