Skip to main content

What are the minimal SQL permissions to run reports based on data imports?


I would like to grant minimal SQL permissions to some users who will regularly need to run 'static' reports - that is, reports on email traffic and on OWA and ActiveSync activity.


You will have to grant at least the following permissions to your users in SQL Server:

  • Object Explorer, Security node > Logins > Login Properties (User Mapping Page): Database role membership for the database should be set to db_datareader, db_datawriter, public.
  • Object Explorer, Security node > Logins > Login Properties (Server Roles Page): Server role should be set to public.

This will allow your users to run all "static" reports - i.e. based on data imports. The corresponding report categories are: Inventory, Traffic Statistics, Mailbox Traffic, OWA Activity, ActiveSync Activity, Server Traffic, Internal Message Delivery.

About the author


Our flagship reporting tool, Promodag Reports, is an innovative and constantly improving email reporting product that brings together all the key elements from Office 365, hybrid and on-premise Exchange messaging environments.

Try Promodag Reports Free for 45 Days

Cookie Notice

Find out more about how this website uses cookies to enhance your browsing experience.