SQL Server Integration Services provides certain fixed database-level roles to help secure access to packages that are stored in SQL Server. The available roles are different depending on whether you’re saving packages in the SSIS Catalog database (SSISDB) or in the msdb database.
Roles in the SSIS Catalog database (SSISDB)
The SSIS Catalog database (SSISDB) provides the following fixed database-level roles to help secure access to packages and information about packages.
- ssis_admin. This role provides full administrative access to the SSIS Catalog database.
- ssis_logreader This role provides permissions to access all the views related SSISDB operational logs.
Roles in the msdb database
SQL Server Integration Services includes the three fixed database-level roles, db_ssisadmin, db_ssisltduser, and db_ssisoperator, for controlling access to packages that are saved to the msdb database. You assign roles to a package using SQL Server Management Studio. The role assignments are saved to the msdb database.