000039329 - JobFramework log error:  VIEW SERVER STATE permission was denied on object 'server', database 'master' in Archer 6.5 or later

Document created by RSA Customer Support Employee on Oct 8, 2020
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000039329
Applies ToProduct Set: Archer
Product/Service Type: Archer (On-Premise)
Version/Condition: 6.5.x or later
IssueAn error appears in the JobFramework.job log files stating: VIEW SERVER STATE permission was denied on object 'server', database 'master'. The user does not have permission to perform this action.

       

<Execution ProcessName="ArcherTech.JobFramework.Job" ProcessID="2624" ThreadID="32" />
        <AssemblyVersion>6.8.0.1170</AssemblyVersion>
        <Channel />
        <Computer>xxxxxxxxxxxxxx</Computer>
    </System>
    <ApplicationData>
        <TraceData>
            <DataItem>
                <TraceRecord Severity="Error" xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord">
                    <TraceIdentifier>Archer.NET</TraceIdentifier>
                    <Description>VIEW SERVER STATE permission was denied on object 'server', database 'master'.
The user does not have permission to perform this action.</Description>
                    <AppDomain>ArcherTech.JobFramework.Job.exe</AppDomain>
                    <Exception>
                        <ExceptionType>System.Data.SqlClient.SqlException, System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType>
                        <Message>VIEW SERVER STATE permission was denied on object 'server', database 'master'.
The user does not have permission to perform this action.</Message>
                        <Source>.Net SqlClient Data Provider</Source>
                        <ContextData>
                            <HelpLink.ProdName>Microsoft SQL Server</HelpLink.ProdName>
                            <HelpLink.ProdVer>14.00.1000</HelpLink.ProdVer>
                            <HelpLink.EvtSrc>MSSQLServer</HelpLink.EvtSrc>
                            <HelpLink.EvtID>300</HelpLink.EvtID>
                            <HelpLink.BaseHelpUrl>http://go.microsoft.com/fwlink</HelpLink.BaseHelpUrl>
                            <HelpLink.LinkId>20476</HelpLink.LinkId>
                        </ContextData>
                        <StackTrace>   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
   at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at System.Data.SqlClient.SqlDataReader.TryConsumeMetaData()
   at System.Data.SqlClient.SqlDataReader.get_MetaData()
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString, Boolean isInternal, Boolean forDescribeParameterEncryption, Boolean shouldCacheForAlwaysEncrypted)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, Boolean inRetry, SqlDataReader ds, Boolean describeParameterEncryptionRequest)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean& usedCache, Boolean asyncWrite, Boolean inRetry)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader()
   at ArcherTech.Kernel.Jobs.ArcherConfigurationReport.SqlHelper.ExecuteReader[T](String connectionString, String query, Func`2 handler)
   at ArcherTech.Kernel.Jobs.ArcherConfigurationReport.ReportDataSources.SqlServerReportDataSource.GetReportData(SqlConnectionString connection)</StackTrace>
                    </Exception>
                </TraceRecord>
            </DataItem>
        </TraceData>
    </ApplicationData>
CauseThis error is related to a job that populates the Archer Configuration Report. The report includes information about performance of the database server that requires escalated privileges for the account that Archer uses to access SQL. The sections of the report requiring this privilege are:
  • SQL System Info,
  • SQL Physical Memory Ready State, and
  • SQL Fragmentation.
The only consequence of the error is that this information will not be displayed in the Archer Configuration Report.  
 
ResolutionIf your security policy permits granting the View Server State privilege to Archer's SQL Server account, you can do so as follows:
  1. In SQL Server Management Studio, expand Security and expand Logins.
  2. Right-click the account that Archer uses to connect to the SQL server.
  3. Select Properties.
  4. Select the Securables page. 
  5. In the Permissions section, scroll down to the View Server State permission.  Select Grant.

Attachments

    Outcomes