Managing roles and permissions for workloads
Operationalizing an R script as part of the extensibility framework workloads, as well as prediction operations using real-time scoring and native scoring, require that a few roles and permissions be set up first.
Extensibility framework workloads
This section outlines the typical security requirements for operationalizing R from SQL Server using sp_execute_external_script
. An SQL Server login or Windows user account can be used to run R scripts directly from SQL Server using stored procedures. The following are the steps to set up this account, such that it has sufficient privileges:
- Allow permission to access the database where the R scripts will be run from.
- Allow permission to read data from secured objects, such as tables. This includes (but is not limited to) the table where the model might have been stored from and the table/view to be used to train the model or input to the prediction.
- If the R script needs to write new data to a table, such...