An account with Read Only privileges in Security Manager can perform Administrative actions (NETIQKB41113)

An account with Read Only privileges in Security Manager can perform Administrative actions

When directly accessing the Repository server and switching between logon accounts, the second logon account that you are working with will require local logon rights to the machine as well (to log on).  However, having both Local Logon and Local Admin rights on the Repository server grants administrative access to Microsoft SQL Server.

To avoid this issue:

• Change permissions on the account so it does not have Logon Locally rights to the Repository Server, which hosts the QDB. 
• Test the affected account by accessing the Operator Console on a separate server or workstation without physically logging onto the Repository server.

If you have Microsoft SQL administrative rights, those privileges bypass AppManager Security and give you full rights to perform any operations.

Formerly known as NETIQKB41113