Troubleshooting Guide: SQL Server Error 5812 – “You do not have permission to run the RECONFIGURE statement”

Why This Error Happens

This error occurs because the login attempting to execute RECONFIGURE lacks the ALTER SETTINGS server-level permission, which is required alongside sp_configure changes. By default, only members of the sysadmin or serveradmin fixed server roles hold this permission, so standard users or application service accounts are denied. This commonly surfaces when a deployment script, DBA tool, or automated job runs under a low-privilege account during server configuration changes.

Step-by-Step Resolution Guide

Step 1: Verify the Current Login’s Role Membership

• Open SQL Server Management Studio (SSMS) and connect using an account with sysadmin privileges.
• Run the following query to check role membership for the problematic login:

  SELECT sp.name, r.name AS role_name
  FROM sys.server_principals sp
  JOIN sys.server_role_members rm ON sp.principal_id = rm.member_principal_id
  JOIN sys.server_principals r ON rm.role_principal_id = r.principal_id
  WHERE sp.name = 'YourLoginName';

• Confirm whether sysadmin or serveradmin is missing from the results.

Step 2: Grant the ALTER SETTINGS Permission

• Instead of adding the user to a full admin role, grant only the specific permission needed:

  USE master;
  GRANT ALTER SETTINGS TO [YourLoginName];

• This follows the principle of least privilege while resolving the RECONFIGURE error.
• Alternatively, if broader administrative rights are appropriate for this account, add it to the serveradmin role:

  ALTER SERVER ROLE serveradmin ADD MEMBER [YourLoginName];

Step 3: Re-run the Configuration Command

• Log back in (or reconnect) as the affected user to refresh the session’s security token.
• Execute the original command sequence again, for example:

  EXEC sp_configure 'show advanced options', 1;
  RECONFIGURE;

• Check the Messages tab in SSMS for confirmation that the command completed without permission errors.

Step 4: Check for Policy-Based Management Restrictions

• On Windows Server 2025 environments using Group Policy or SQL Server Policy-Based Management (PBM), confirm no server-level policy is blocking ALTER SETTINGS grants.
• Navigate to SSMS > Management > Policy Management > Policies and review any policies tagged “Surface Area Configuration.”

Alternative or Verification Steps

• Verify the fix by logging in as the previously failing account and running EXEC sp_configure 'remote access', 1; RECONFIGURE; — it should complete without Error 5812.
• If permissions still fail after granting ALTER SETTINGS, check for a Contained Database context or a Deny ALTER SETTINGS rule explicitly set at the login level using SELECT * FROM sys.server_permissions WHERE state = 'D';.