User configuration of Microsoft SQL Server with restricted access

I can set up a user in Microsoft SQL Server with read-only access and without rights to change the structure or data.
In terms of time - approximately 1 day, if there is access to the server and it is clear which specific database is needed for openclawbot.

Well, here it’s more like - I would do it simpler and more reliably through a separate login, a separate user in the required database, with minimal SELECT rights only on the necessary schemas or tables, without db_owner and without unnecessary roles.
To limit the load, I will check the edition of SQL Server and the available mechanisms - Resource Governor, limits through the classifier, if necessary, restrictions on queries, timeouts, and rights, so that the user cannot overload the server with heavy queries =)

Look, there’s a nuance here... Resource Governor is not available in all editions of SQL Server, so before a precise scheme of restrictions, we need to check the version and edition.
If it’s not available - I will suggest a practical option through rights, views, separate queries, indexes, timeouts on the connection side, and access regulations.

… After the setup, I will provide a brief instruction on how to create such users in the future and how to regulate the load.
It will be necessary to have access via AnyDesk within the exchange rules, administrative access to SQL Server Management Studio or the server, and the name of the database from which openclawbot should read data.

I would like to clarify two questions.
> What version and edition of SQL Server - Standard, Enterprise, Express, or another?
> Should openclawbot read the entire database or only specific tables/schemas?

Similar logical system tasks with access, analytics, and corporate processes
> https://business.ingello.com/platforma - corporate platform with roles, data, and access management
> https://business.ingello.com/forma-bpm - automation of business processes and systematic work with data

More about us - https://systems-fl.ingello.com/ua
Overall, it’s fine, the task is small, but it’s better to do it carefully - because in databases, as they say, check rights seven times, give SELECT once.

Show original

Translate

Hello.
The task is clear, it is divided into two parts: creating a read-only user and limiting its load on the server.
Read-only access is standard: a separate login, rights only for SELECT, without the ability to change data, structure, or run administrative commands.
Regarding load limitation (CPU/RAM/throttling), an important question arises: what edition of SQL Server do you have? The Resource Governor resource limit mechanism is only available in the Enterprise Edition. If you have Standard, then there is no full CPU/RAM limitation per user, and the solution will be different (limits on parallelism, query timeouts, application-side restrictions). The answer will determine what can actually be done.
To assess accurately, please clarify:
- edition and version of SQL Server (SELECT SERVERPROPERTY('Edition'), SERVERPROPERTY('ProductVersion'))
- On-prem or Azure
- does the analytics connect directly to the database or through an application

… The work itself will take a few hours: setup, load testing, and instructions on how to create such users and regulate limits in the future. I am ready to perform via AnyDesk.

Show original

Translate

Welcome!

The Devoxen team has experience working with Microsoft SQL Server and managing access for external services and bots.

We can perform:
- creation of a separate user for openclawbot;
- setting up read-only access (SELECT only);
- restricting access to specific tables/schemas;
- checking the possibility of throttling depending on the SQL Server edition;
… - configuring Resource Governor or alternative load limiting mechanisms;
- testing the connection and verifying access security.

We work carefully without impacting the current operation of the database. After completion, we will provide a brief documentation and recommendations for further administration.

We are ready to connect promptly and perform the setup. We also provide a guarantee and support after the work is completed.

Show original

Translate

Good day. I am ready to configure your analytical bot. The task is clear and consists of two logical parts.
The first part is security. We will create a Login and Database User, assigning it exclusively the role of db_datareader. This will prevent any INSERT, UPDATE, DELETE, as well as the creation or modification of tables at the database core level.
The second part is throttling of resources. In Microsoft SQL Server, this is implemented through the Resource Governor mechanism. I will create a separate resource pool where we will strictly limit the maximum CPU consumption (for example, to 20%) and memory (for example, to 15%). Next, I will write a classifier function that will automatically intercept the bot's connections (by its login) and place all its heavy analytical queries into this isolated "sandbox." Thus, even if the bot runs the heaviest query, the main server will not hang.
After completion (via AnyDesk), I will provide you with a detailed text instruction explaining how to change the CPU/RAM limits if the bot needs more or less resources, and how to create similar users.
I have only one critical clarification before starting: which edition of SQL Server do you have installed? (Enterprise, Standard, Express?). This is important because the Resource Governor functionality for strict CPU/RAM limitation is fully supported only in the Enterprise/Developer editions. If you have Standard, I will suggest alternative options for limiting query heaviness.
The cost of the "turnkey" work with the instruction writing is 1500 UAH. I am ready to connect via AnyDesk today.

Show original

Translate

Good day, I can create a user with restrictions and write instructions.

Show original

Translate