# Required permissions

This topic describes the permissions the user specified in the endpoint settings must be granted on the source database.

## Running with the db\_owner role on Azure SQL Managed Instance

Information noteThese permissions are relevant for Azure SQL Managed Instance only. When running with the db\_owner role on Azure SQL Database, no other permissions are required.

If the user is a member of the `db_owner` database role, the following permissions must be granted:

* On the master database:

  * grant VIEW ANY DEFINITION
  * grant VIEW SERVER STATE

* On the MSDB database:

  * grant SELECT ON SYSJOBACTIVITY

  * grant SELECT ON SYSJOBS

## Running without the db\_owner role

If the user is not a member of the `db_owner` database role, the following permissions must be granted on the source database:

* grant VIEW DATABASE STATE
* grant SELECT

Information noteThere are several limitations that apply when running without the db\_owner role. For more information, see [Limitations and considerations](https://help.qlik.com/en-US/replicate/May2025/Content/Global_Common/Content/SharedReplicateHDD/Azure-MSCDC-Source/azremscdc-source-limitations.htm).