I agree. In larger organizations, NPM would be controlled by System Admins or "Server people" and SQL Admins. NCM would mostly be used fully by network personnel. The "Network People" would not need full admin rights for the NPM application. They should have NO control over other users. System Admins should not be able to execute NCM commands either. The same goes for SAM. You shouldn't have to be an NPM admin to manage your server (i.e. SQL Admin). All modules need to be separated as far as permissions are concerned. It should never be assumed that roles are shared across modules.
↧