Error: '229: SELECT permission denied on object sysxlogins' occurs when executing reports (NETIQKB36600)

fact
VigilEnt Security Agent for Microsoft SQL Server 1.0x

fact
VigilEnt Security Manager

symptom
Error: '229: SELECT permission denied on object sysxlogins' occurs when executing reports

symptom
The VigilEnt Security Manager task reports the following error condition:

Errors occurred while Building report query: SQL Server message 229: SELECT permission denied on object 'sysxlogins', database'master', owner 'dbo'.(line 1)

symptom
This error occurs when executing one of the following reports:

• Role Membership Summary
• Roles DB User is a Member of
• Roles with no Users
• Users and login not a member of any Role
• User Defined Role permissions

cause
The account used to access the database does not have the proper permissions.

fix
To grant the proper permissions, execute the following TSQL in Query Analyzer:

USE Master
GO

GRANT SELECT ON dbo.sysxlogins TO sqlcqr_vsm_agent
GO

This will grant SELECT permissions on the sysxlogins table to the sqlcqr_vsm_agent account.

Formerly known as NETIQKB36600