# Required permissions

The user specified in the endpoint settings must have the following privileges on the source database:

## Adding users

Create users using Google Cloud Console only (Users > Add User Account). Users created any other way will not work as expected.

## Running with the db\_owner role

If the user is a member of the `db_owner` database role, the following permissions must be granted:

* On the master database:

  * grant VIEW ANY DEFINITION
  * grant VIEW SERVER STATE

* On the MSDB database:

  * grant SELECT ON SYSJOBACTIVITY

  * grant SELECT ON SYSJOBS

## Running without the db\_owner role

If the user is not a member of the `db_owner` database role, the following permissions must be granted:

On the master database:

* grant VIEW DATABASE STATE

On the source database:

* grant VIEW DATABASE STATE
* grant SELECT

On the MSDB database:

* grant SELECT ON DBO.CDC\_JOBS
* grant SELECT ON DBO.SYSJOBACTIVITY
* grant SELECT ON DBO.SYSJOBS

Information noteThere are several limitations that apply when running without the db\_owner role. For more information, see [Limitations and considerations](https://help.qlik.com/en-US/replicate/November2025/Content/Replicate/Main/GoogleCloudSQLforSQLServerSource/GoogleCloudSQLforSQLServerSource-limitations.htm).