What Local Server Rights are needed for SQL DBAs?

["Eggleston, Mark" <meggleston () healthpart com>]

Hello Colleagues,

I need some help finding good documentation (i.e. best or standard
practice) for deciding what appropriate rights are really needed for a
DBA to perform his or her duties (Win 2003, SQL 2005/8).  Can anyone
point me to a good reference as my google searches have not provided an
authoritative conclusion.

Currently we have our Database Administration Group as local admins on
those servers hosting SQL... However, is the serveradmin role required?
Our Manager of this group has indicated that DBA certainly require these
server specific roles: setupadmin; processadmin; dbcreator.  

Thanks in advance for sharing how you may have tackled this issue at
your company or a methodology on how to pursue.

Thanks,

Mark Eggleston
Manager, Security and Business Continuity 

 
This message, together with any attachments, is intended only for
the use of the individual or entity to which it is addressed. It
may contain information that is confidential and prohibited from
disclosure. If you are not the intended recipient, you are hereby
notified that any dissemination or copying of this message or any
attachment is strictly prohibited. If you have received this
message in error, please notify the original sender immediately by
telephone or by return e-mail and delete this message along with
any attachments, from your computer.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------